> For the complete documentation index, see [llms.txt](https://docs.channel360.co.za/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.channel360.co.za/api-usage/get-started/authentication.md).

# Authentication and your Organisation API URL

How API requests are authorised, and where to find your API key and Organisation API URL.

Every request needs your API key in a header and your organisation ID in the URL, and the two must belong together.

## The two things every request needs

| What                     | Where it goes                                | Where to find it                                                             |
| ------------------------ | -------------------------------------------- | ---------------------------------------------------------------------------- |
| **Organisation API URL** | The start of every URL                       | **Settings → Developer Settings**, the **API details** card, **Copy** button |
| **API key**              | The header `Authorization: Bearer <API_KEY>` | **Settings → Developer Settings → API keys** tab                             |

The Organisation API URL looks like this:

```
https://channel360.co.za/v1.1/org/<ORG_ID>
```

Requests are HTTPS only. Every path in these docs, such as `/notification`, goes on the end of this URL.

## A key works only with its own organisation

An API key is created under one organisation. The organisation ID in the URL must be that same organisation, or the request is rejected with `401` or `403`.

If you have access to more than one organisation, create a separate key in each one.

## Managing keys

* **Create** as many keys as you need. One key per system (for example "Website" and "CRM") makes it easy to switch one off without affecting the others.
* **The full key is shown once**, when you create it. The **API keys** table afterwards shows it masked.
* **Revoke** in the **API keys** table removes a key immediately and permanently. Anything still using it stops working.

## Related

{% content-ref url="/pages/4scSkzdpFgZjCWAq1QWu" %}
[Quickstart: send your first message](/api-usage/get-started/quickstart.md)
{% endcontent-ref %}

{% content-ref url="/pages/GpUhgpfkZfSbzo9LoHVe" %}
[Troubleshooting and error messages](/api-usage/troubleshooting.md)
{% endcontent-ref %}