Authentication

All requests must include a valid API Key. You can send it in two ways:

Header X-API-Key

GET /v1/bookings
X-API-Key: cpk_a1b2c3d4e5f6...

Bearer Token

GET /v1/bookings
Authorization: Bearer cpk_a1b2c3d4e5f6...

API Keys are created from the CitaPro admin panel. Only users with Admin role can create and manage keys.

Authentication error responses

Code	Description
401	API Key not provided, invalid, expired or revoked

{
  "message": "API key is required. Provide it via X-API-Key header or Authorization Bearer."
}

{
  "message": "Invalid API key."
}

{
  "message": "API key is expired or revoked."
}