API Authentication Headers

Overview

API requests should authenticate with a secure header and should always use HTTPS.

Required headers

Accept: application/json
X-RLP-API-Key: YOUR_API_KEY

Example curl request

curl -X GET "https://your-rise-domain.com/api/rise-log/activity" \
  -H "Accept: application/json" \
  -H "X-RLP-API-Key: YOUR_API_KEY" 

Do not use

• Do not place API keys in frontend JavaScript.
• Do not put API keys in public query strings.
• Do not send keys over HTTP.
• Do not share one key between unrelated systems.

Troubleshooting

If you receive 401 Unauthorized, check the key value and header name. If you receive 403 Forbidden, check the key scope.