API key
Pass your key in theX-API-Key header:
Bearer token (Clerk JWT)
If your organization uses Clerk-based sign-in, pass the organization JWT instead:If both headers are present on one request, the API key takes precedence. Use one method or the other.
Bearer token (Clerk user API key)
Clerk can also issue long-lived user API keys for machine-to-machine access. Unlike the organization JWT, a Clerk user API key is an opaque token — not a JWT: it carries no self-contained claims and is verified server-side against Clerk on every request. Pass it in the sameAuthorization: Bearer header:
This method depends on a Clerk secret key being configured for the deployment. When it is not configured, requests using a Clerk API key receive a
503 (see the error table below). The organization JWT and X-API-Key methods are unaffected.Public endpoints
Catalog (/catalog/*) and template (/flows/templates/*) endpoints are public and require no authentication.
Errors
Clerk user API key errors
Requests authenticated with a Clerk user API key can return the following, with the responsedetail set to the message shown: