Authentication - Firstbase API

The Public API uses API key authentication via the Authorization header.

Header format

Authorization: ApiKey <token_value>

Example:

curl -sS "https://apipub.firstbasehq.com/api/v1/people" \
  -H "Authorization: ApiKey fb_live_xxxxxxxx" \
  -H "Accept: application/json"

Never commit API keys to source control or share them in client-side code.

Creating and rotating keys

Organization admins create keys in the Firstbase admin portal. See Getting Started with the Firstbase API for step-by-step instructions. Rotate compromised keys immediately by revoking the old key and issuing a new one.

Swagger UI

When testing in Swagger UI, authorize with the same ApiKey <token_value> format in the Authorize dialog.

Playground

Use the Try it panel on API reference pages. Enter your key as ApiKey <token_value> in the authorization field.

Quickstart

⌘I

​Header format

​Creating and rotating keys

​Swagger UI

​Playground

Header format

Creating and rotating keys

Swagger UI

Playground