Authentication

Authenticate your API requests using Amboss API keys.

Getting an API Key

For queries and mutations that need authentication, you can get an API key by logging into Amboss and going to your account panel.

In the API Keys Section you can create a new key.

Using Your API Key

The request should include the following header:


Authorization: Bearer [API_KEY]

Replace [API_KEY] with your actual API key.

Example

request.sh


curl -X POST \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{"query":"query{getHello}"}' \
  https://api.amboss.space/graphql

Keep your API key secure. Do not share it publicly or commit it to version control. If you believe your key has been compromised, rotate it immediately in the API Keys settings .