Capture API authentication
Create, store, test, rotate, deactivate, and replace Capture API credentials.
- For
- Integration developers and company admins
- Owner
- Integration engineering
- Outcome
- Authenticate one server-side client and complete a safe API information request.
- Last verified
- 2026-08-30
- Next review
- 2026-11-28
- Status
- supported
Every request requires the client key and one-time client secret. Create one client for one external integration and keep the secret on a server.
Create and store the client
- Create one API client for one external integration.
- Copy the secret once and store it in the server-side secret store.
- Record the client owner, source mapping, rate limit, and rotation date.
- Do not place either credential in browser code or a mobile application.
Test authentication
- A successful response confirms the client and shows its supported capture information.
- A 401 response means the key, secret, active state, or client scope is not accepted.
curl 'https://crm.sakhaa.ai/api/v1/capture/info' \
-H 'X-API-Key: YOUR_API_KEY' \
-H 'X-API-Secret: YOUR_API_SECRET'Rotate or deactivate
- Create or regenerate the replacement secret during an approved maintenance window.
- Update the server-side integration and test the information endpoint.
- Stop or replace the old client only after the new path is healthy.
- Deactivate the client before deletion and confirm the replacement intake path.