Authentication

All Inkbox API endpoints require authentication using service tokens via Bearer token authentication.

To use the Inkbox API, you need a service token. Create an account and generate a service token from the Inkbox console.

Once you have an account, you can create and manage service tokens from the Inkbox console.

The Inkbox API uses service token authentication. Include your service token in the X-Service-Token header with every request.

Header format

X-Service-Token: YOUR_SERVICE_TOKEN

Example

cURL

cURL

Python

JavaScript

401 Unauthorized

Returned when the service token is missing, invalid, expired, or revoked.

JSON

Common issues:

• Missing X-Service-Token header
• Expired or revoked service token
• Invalid service token format
• Service token not generated from https://console.inkbox.ai

1. Keep service tokens secret: Never commit service tokens to version control. Use environment variables or secure secret management systems.
2. Use environment variables:

   export INKBOX_SERVICE_TOKEN="your-service-token-here"

3. Server-side only: Never use service tokens in client-side JavaScript. Service tokens should only be used in secure server environments.
4. Rotate tokens regularly: Regularly rotate service tokens for security. Generate a new token from the console, update integrations, then revoke the old token.