API reference
4 min read
Authentication
Authenticate every request with a secret key, scope keys to the right environment, and learn which errors mean a key is missing or revoked.
Every request to the Tessera API is authenticated with a secret key sent in the Authorization header. Requests without a valid key return 401 Unauthorized.
terminal
curl https://api.tessera.dev/v1/events \ -H "Authorization: Bearer $TESSERA_KEY"
Key scopes
Keys are scoped to a single workspace. Create separate keys for each environment so you can rotate one without touching the others.
Write keys can send events but can’t read data
Read keys can query events and schemas
Admin keys can manage sources, destinations and members
Keep keys server-side
Secret keys grant access to your workspace. Never ship them in browser or mobile code. Use a write key behind your own endpoint instead.
Was this page helpful?
