Authentication

The ArcSite API uses API tokens to authenticate requests. A company admin can create and delete API tokens in the ArcSite web app under Admin → Developers → API tokens. The Developers section is available on plans that include the Developer API.

An API token belongs to your organization, not to a single user: it can read and change every project in the organization, so keep it secret. API tokens don’t expire; delete a token to revoke it.

Authentication to the API is performed via the HTTP Authorization header:

cURL

curl "https://api.arcsite.com/v1/projects" \
  -H "Authorization: Bearer your_api_token_here"

JavaScript

const response = await fetch("https://api.arcsite.com/v1/projects", {
  headers: {
    Authorization: "Bearer your_api_token_here",
  },
});
const data = await response.json();

Python

import requests

response = requests.get(
    "https://api.arcsite.com/v1/projects",
    headers={"Authorization": "Bearer your_api_token_here"},
)
data = response.json()

All API requests must be made over HTTPS. Plain HTTP requests are redirected to HTTPS, and a redirected POST or PATCH can lose its body, so always use https://. Requests without a valid token fail with 401 Unauthorized.

The header takes the following form:

Authorization: Bearer your_api_token_here

Note

You must replace your_api_token_here with your own API token.