SuitePortal

API Authentication

How to authenticate with the SuitePortal API.

API Authentication

This documentation is currently being developed. Check back soon for complete content.

Authentication Methods

API Keys

Primary method for server-to-server integration.

Creating an API Key

  1. Navigate to Settings > API Keys
  2. Click Create API Key
  3. Set permissions scope
  4. Copy and store securely

Using an API Key

Include in Authorization header:

curl -H "Authorization: Bearer sk_live_your_api_key" \
  https://api.suiteportal.io/v1/transactions

Session Tokens

For browser-based applications using existing user sessions.

Security Best Practices

  • Never expose API keys in client-side code
  • Use environment variables
  • Rotate keys periodically
  • Use minimum required permissions
  • Monitor API key usage

Key Permissions

API keys can be scoped to specific permissions:

ScopeAccess
read:transactionsRead transaction data
read:entitiesRead entity data
write:*Write access
admin:*Administrative access