Authentication

All external API endpoints require API key authentication and live under /v1/ext/.

Creating an API key

1. Go to Settings → Company Settings → API Keys
2. Click "Create API Key"
3. Name your key (e.g., "Zapier Integration", "Internal Script")
4. Copy the key. It is only displayed once and cannot be retrieved later.

Using your API key

Include the key in the x-api-key header with every request:

curl -H "x-api-key: YOUR_API_KEY" \
     https://slate.zerulean.com/v1/ext/items

Scopes

Each API key has scopes that control what it can access:

New keys are created with all scopes by default.

Rate limits

• 60 requests per minute per API key
• Exceeding the limit returns 429 Too Many Requests
• The rate limit window is 60 seconds

Errors

Key management

• Rename keys to keep track of what they are used for
• Revoke keys immediately when no longer needed
• Keys can have optional expiration dates