Authentication
The Kawaa API uses API keys to authenticate requests. You can create and manage your API keys in the Dashboard.
Using Your API Key
Include your API key in the X-Api-Key header with every request:
HTTP Header
X-Api-Key: ev_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxAPI Key Format
Prefix: ev_ followed by 32 alphanumeric characters.
Generate keys from your dashboard. Each key can be named for easy identification.
Getting Your API Key
- 1Sign in to your Kawaa Dashboard
- 2Navigate to Settings → API Keys
- 3Click "Create New Key" and give it a name
- 4Copy and securely store your key (it won't be shown again)
Security Best Practices
- •Never expose your API key in client-side code or public repositories
- •Use environment variables to store your keys
- •Rotate your keys periodically and if you suspect they've been compromised
- •Use separate keys for development and production environments
Authentication Errors
| Status | Code | Description |
|---|---|---|
401 | UNAUTHORIZED | Missing or invalid API key |
403 | FORBIDDEN | API key doesn't have permission for this resource |
Example Request
cURL
curl -X POST https://api.kawaa.com/v1/verify \
-H "X-Api-Key: ev_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
-H "Content-Type: application/json" \
-d '{"email": "test@example.com"}'