# Authentication

All API requests must include a valid API key. Keys can be generated in your Wolfeo account under Settings → API.

WARNING

API keys are tied to a paid account. Free trial accounts cannot generate keys.

Pass the key in the Authorization header:

curl --request GET "https://api.wolfeo.me/v1/contact?contact_id=1" \
  --header "Authorization: Bearer YOUR_API_KEY"

# Query Parameter (Legacy)

For backward compatibility you can pass the key as api_key in the query string. This method is not recommended for new integrations as URLs (including keys) may appear in server logs.

curl --request GET "https://api.wolfeo.me/v1/contact?contact_id=1&api_key=YOUR_API_KEY"

# Invalid Key

If the key is missing or invalid, every endpoint returns:

{
    "success": false,
    "error": {
        "code": "UNAUTHORIZED",
        "message": "Invalid or missing API key"
    }
}

HTTP status: 401 Unauthorized

# Key Management

  • You can create multiple keys (e.g. one per integration).
  • Keys can be named to track which application is using them.
  • A key can be disabled at any time from Settings → API without deleting it.
  • Deleting a key immediately revokes all access for that integration.

# What's next