Flireo AI
WebsiteLinkedin
WebsiteLinkedin
  1. Get started
  • API Reference
    • Agents
      • List all agents
      • Create a new agent
      • Get an agent
      • Update an agent
      • Delete an agent
    • Tool Templates
      • List all tool templates
      • Create a new tool template
      • Get a tool template
      • Update a tool template
      • Delete a tool template
    • Numbers
      • List all phone numbers
      • Register a phone number
      • Get a phone number
      • Update a phone number
      • Delete a phone number
    • Calls
      • List calls
      • Get call by ID
      • Initiate outbound call
    • Call Control
      • Send control command to active call
    • Usage
      • Get usage logs
    • SIP Trunks
      • List SIP trunks
      • Create a SIP trunk
      • Get a SIP trunk
      • Delete a SIP trunk
    • Voices
      • List available voices
    • BYOK
      • Get BYOK configurations
      • Add BYOK configuration
      • Delete BYOK configuration
      • Get BYOK provider configurations
    • Domains
      • Get your domain
      • Add a domain
      • Delete your domain
      • List available Resend domains
      • Select and sync a Resend domain
      • Verify domain DNS records
      • Refresh domain status
    • Webhooks
      • Dynamic assistant configuration webhook
      • Tool/Function Call
      • Call Status Update
      • End of Call Report
    • Analysis Templates
      • List analysis templates
      • Create analysis template
      • Get analysis template
      • Update analysis template
      • Delete analysis template
    • Organization
      • Get organization information
    • Campaigns
      • List all campaigns
      • Create a campaign
      • Get a campaign
      • Update a campaign
      • Delete a campaign
      • List campaign leads
      • Add a lead
      • Remove a lead
  • Documentation
    • Get started
      • Quickstart
      • Introduction
      • Authentication
    • Core concepts
      • Agents
      • Phone numbers
      • Calls
      • Webhooks
    • Api's
      • Organization
      • Agents
      • Phone numbers
      • Sip trunks
      • Calls
      • Call control
      • Usage
      • Voices
      • BYOK
      • Domains
      • Analysis templates
      • Tool templates
    • Webhooks
      • Overview
      • Assistant request
      • Tool calls
      • Status update
      • End of call report
      • Security
    • Guides
      • BYOK Setup
      • Call analysis
      • Custom Tools
      • Call Transfers
      • xAI Realtime Integration
      • Analysis templates
      • Billing
      • Error codes
      • Rate limits
      • Sip Trunks
      • Tool templates
      • Troubleshooting
WebsiteLinkedin
WebsiteLinkedin
  1. Get started

Authentication

All API requests require authentication using a Bearer token in the Authorization header.

Getting Your API Key#

1.
Log in to the Flireo dashboard
2.
Navigate to Settings > API Keys
3.
Copy your API key

Making Authenticated Requests#

Include your API key in the Authorization header with every request:

Request Headers#

HeaderValueRequired
AuthorizationBearer YOUR_API_KEYYes
Content-Typeapplication/jsonFor POST/PATCH requests

Example: Get Account Information#

Response:
{
  "id": "user-uuid-here",
  "email": "you@example.com",
  "company_name": "Your Company",
  "minutes_balance": 500,
  "monthly_usage_minutes": 120,
  "active_numbers": 3,
  "active_agents": 2,
  "active_calls": 0
}
See Get Account Information for full details.

Rate Limits#

The API enforces the following rate limits:
Limit TypeRate
General API requests100 requests per minute per API key
Call control commands10 commands per minute per active call
When you exceed a rate limit, the API returns a 429 Too Many Requests response.

Error Responses#

401 Unauthorized#

Returned when the API key is missing, invalid, or expired.
{
  "error": "Unauthorized",
  "message": "Invalid or missing API key"
}

403 Forbidden#

Returned when your API key doesn't have permission for the requested resource.
{
  "error": "Forbidden",
  "message": "You don't have access to this resource"
}

Security Best Practices#

1.
Never expose your API key in client-side code - Always make API calls from your server
2.
Rotate keys periodically - Generate new keys and revoke old ones regularly
3.
Use environment variables - Store keys in environment variables, not in code
4.
Monitor usage - Check your account dashboard for unexpected API activity
Modified at 2025-12-29 14:22:23
Previous
Introduction
Next
Agents
Built with