Authentication

Authentication with the SteadyMD API

The SteadyMD API uses API keys to authenticate all requests. Each key is internally flagged as either a sandbox or production key — but both operate within the same environment.

🔐 API Key (tokenAuth)

• Header Name: Authorization
• Format: Token YOUR_API_KEY

Include the header in all authenticated requests like so:

Authorization: Token abc123yourapikey

Note: The "Token " prefix (with a space) is required. Omitting it will result in an authorization failure.

All authenticated endpoints require this header. The API enforces access based on whether your key is flagged as sandbox or production.