Every API request requires an API key in the Authorization header.
Create a key from the API section of your DataLane workspace settings. The complete key is shown only once, so copy it into your secret manager immediately.
Never expose an API key in browser code, logs, or a public repository. Make DataLane requests from a trusted server.
Test a key
The organization describe endpoint is a lightweight way to verify a key and inspect its organization-scoped limits.
An invalid or unknown key returns invalid_api_key. A key that has been disabled returns revoked_api_key. Both use HTTP 401.
Rotate a key
- Create a new named key in workspace settings.
- Deploy the new key to every caller.
- Verify requests with the new key.
- Revoke the old key.
Revocation takes effect immediately. Each key is scoped to one organization, and campaigns belonging to other organizations are returned as not found. 
