Information
- License: Proprietary
- OpenAPI version:
3.1.0
Appointment booking for one workspace or many. Every endpoint uses an API key, except the customer-link routes under /v1/public, where the token in the path is the only credential.
A workspace secret key, prefix sk_. Use it from a server. Do not put
it in a browser.
Security scheme type: http
A workspace publishable key, prefix pk_. Use it from a browser. It
reaches three endpoints only: GET /v1/availability, POST /v1/bookings
and POST /v1/bookings/{id}/verify. Every other route refuses it with a
403 and secret_key_required.
The API checks the Origin header when the request carries one. A request that sends no Origin is not origin-checked, so this key does work from a server. The origin list is an anti-abuse control and not a security boundary. See the keys guide.
Security scheme type: http
An account key, prefix ak_. It reaches the four /v1/account routes
and no others. It does not unlock workspace routes. Use it from a
server.
Security scheme type: http