Authentication
The Tella API uses Bearer token authentication. Every request must include your API key in the Authorization header.Getting your API key
- Sign in to Tella
- Navigate to Settings > API Keys
- Click Create key
- Copy and securely store your key
Using your API key
Include your API key in theAuthorization header of every request:
Example request
API key format
Tella API keys follow this format:- Prefix:
tella_pk_(identifies it as a Tella public API key) - Suffix: 32 random alphanumeric characters
Security best practices
Never expose your API key
Never expose your API key
- Don’t commit API keys to version control
- Don’t include them in client-side code
- Use environment variables to store keys
Use environment variables
Use environment variables
Rotate keys regularly
Rotate keys regularly
Generate new API keys periodically and revoke old ones. This limits the impact
if a key is compromised.
Use separate keys for different environments
Use separate keys for different environments
Create separate API keys for development, staging, and production environments.
Error responses
401 Unauthorized
Returned when the API key is missing or invalid:- Missing
Authorizationheader - Incorrect API key format
- Revoked or expired API key
403 Forbidden
Returned when the API key doesn’t have permission for the requested resource:Revoking API keys
To revoke an API key:- Go to Settings > API Keys
- Find the key you want to revoke
- Click Revoke