Authentication

Bearer Token Authentication

All API requests must include your API token in the Authorization header using the Bearer scheme.

Authorization: Bearer YOUR_API_TOKEN

Making Authenticated Requests

const response = await fetch("https://app.limai.io/api/v1/...", {
headers: {
  "Authorization": `Bearer ${API_TOKEN}`
}
})

Error Responses

If your token is missing or invalid, the API returns a 401 Unauthorized response:

{
  "error": "Authentication required"
}

If your token is valid but you lack permission for a resource, the API returns a 403 Forbidden response:

{
  "error": "Unauthorized: No access to this project"
}

Token Scoping

API tokens are scoped to your organization. A token grants access to all projects and resources within the organization that your user account can access. There is no per-project token scoping -- use role-based access control within the platform to manage permissions.