All API requests require authentication using a Bearer token in the Authorization header.Getting Your API Key#
1.
Log in to the Flireo dashboard
2.
Navigate to Settings > API Keys
Making Authenticated Requests#
Include your API key in the Authorization header with every request:| Header | Value | Required |
|---|
Authorization | Bearer YOUR_API_KEY | Yes |
Content-Type | application/json | For POST/PATCH requests |
{
"id": "user-uuid-here",
"email": "you@example.com",
"company_name": "Your Company",
"minutes_balance": 500,
"monthly_usage_minutes": 120,
"active_numbers": 3,
"active_agents": 2,
"active_calls": 0
}
Rate Limits#
The API enforces the following rate limits:| Limit Type | Rate |
|---|
| General API requests | 100 requests per minute per API key |
| Call control commands | 10 commands per minute per active call |
When you exceed a rate limit, the API returns a 429 Too Many Requests response.Error Responses#
401 Unauthorized#
Returned when the API key is missing, invalid, or expired.{
"error": "Unauthorized",
"message": "Invalid or missing API key"
}
403 Forbidden#
Returned when your API key doesn't have permission for the requested resource.{
"error": "Forbidden",
"message": "You don't have access to this resource"
}
Security Best Practices#
1.
Never expose your API key in client-side code - Always make API calls from your server
2.
Rotate keys periodically - Generate new keys and revoke old ones regularly
3.
Use environment variables - Store keys in environment variables, not in code
4.
Monitor usage - Check your account dashboard for unexpected API activity
Modified at 2025-12-29 14:22:23