Authentication
Every /api/v1/* request needs a bearer token:
Authorization: Bearer pk_live_…Keys are tenant-scoped and reach any workspace inside the tenant. Revoke from the dashboard at any time; revocation propagates within ~60s.
Test mode
Create a key with mode Test on the API keys page and it's prefixed pk_test_. Test keys hit the same endpoints with the same shapes, but the run is sandboxed:
- Rendered PDFs carry a diagonal TEST watermark.
- Nothing counts against render or sign-request quotas, and nothing is billed.
- No emails and no webhooks are sent. Sign requests return the sign link(s) directly in the response (
signUrl, andsignUrlskeyed by signer index) so you can walk the signer flow yourself. - Artifacts expire after 1 hour, and async jobs are capped at 10 items.
Test rows are flagged testMode: true everywhere. Swap in a pk_live_ key and the same code goes to production.
Need help?
Open a ticket from the in-app Support page, or email [email protected].