Authentication - Polymorfa

Include your credential in every API request:

Authorization: Bearer <token>

Credential	Access
Team API key	Resources in your team, limited by its scopes
Project token	Resources in one project, limited by its scopes
Client token	One session and its allowed actions

Use API keys and project tokens on your server. Use a client token for browser or mobile integrations.

Permissions

Each method lists its required permissions. A 403 means your credential lacks access or a required scope. A 401 means the credential is missing, invalid, expired, or revoked.

Revoke an API key

Revoke a key from the Console when it is no longer needed. Revoked keys cannot make API requests.