Authentication
Ingestion endpoints accept your API key in one of these forms:
| Header | Example |
|---|---|
X-API-Key | X-API-Key: fp_your_key_here |
Authorization | Authorization: Bearer fp_your_key_here |
Invalid or missing credentials return 401 with a JSON error body.
Keys are scoped to a workspace. Create keys in the FlowPulse app under Developer or workspace settings.
HTTPS
In production, use HTTPS and the same base URL as in Quickstart. Do not embed API keys in public front-end code or commit them to repositories.