Authentication

All requests to the Leap API endpoints must include a valid Bearer token in the HTTP Authorization header. There are 2 methods for obtaining this token:

• Login Based Authentication which can be useful for manual testing but can also be used for automated authentication
• API Key Authentication which is great for automated authentication and can be created or revoked at any time

❗️

Production vs. Staging

API keys (and login-based auth tokens) are scoped to production or staging environments separately so make sure you are creating your key in the appropriate environment in which you want to use it. You will receive a 403 error if the key (or login-based auth token) is invalid.

🚧

Making API calls from browser using 'Try It' button

When logged into the Partner Portal and making calls from the browser in this developer portal, your Staging token is automatically included. For Production calls, a valid production bearer token (API key or login token) must be included in the AUTHORIZATION box.