Skip to main content

Authentication

All Clemta APIs use API key authentication. Include your API key in the X-API-KEY header on every request.

Getting an API Key

There is no public signup. Your credentials are provisioned by Clemta. If you do not have an API key, contact us at [email protected].

Authorization (Access Control)

Clemta authorizes requests based on your API key and associated partner account. You can only access resources that belong to your account.
  • Company resources are only accessible if they are linked to your partner account
  • Contacts and other accounting resources are restricted to your companies
  • Some endpoints may apply additional resource-level checks
If a request is authenticated but not authorized, the API returns 403 with ACCESS_DENIED.

Example Requests

curl.sh

Notes

  • Do not embed API keys in client-side code.
  • Use separate keys per environment (sandbox vs production).