Authentication

The public API uses bearer authentication.

$curl https://api.sailorhq.io/phone-system/outcomes \
> -H "Authorization: Bearer $SAILOR_API_TOKEN" \
> -H "Content-Type: application/json"

Requests act on the authenticated workspace. When a request cannot be authenticated or authorized, the API returns an error response with an error string.

Keep API tokens server-side. Do not embed tokens in browser code, mobile apps, or public documentation examples.