Skip to main content
All API endpoints require authentication using API Keys. To authenticate your requests:

API Keys

  1. Obtain your API Key from the API Integration Settings page.
  2. Include this key in the X-Api-Key header of your HTTP request:

API Key Rotation

Volubile provides a pair of API keys enabling you to manage a regular rotation or replace a potentially compromised key.

Bearer Tokens

Volubile also provides short-lived JWT Bearer tokens. This flow is useful when you do not want to expose your API key to downstream services and when you want to limit the permissions granted to a client with scoped access.

Issue a token

Use your API key to request a Bearer token from POST /v1/auth/token. For the full request and response reference, see Create Token. A token stays valid for the number of seconds given in expiresIn. Reuse it until it expires: token issuance is limited to 10 tokens per minute per API key (see Rate limiting).

Supported scopes

Agents
Calls
Campaigns
Bulk

Use a Bearer token

Send the issued token in the Authorization header:
Bearer tokens are short lived and scoped to the permissions requested when they are issued. A Bearer token is tied to the API key that issued it. When you rotate that API key, or when it is disabled, the key and all the Bearer tokens it issued stop working within a minute, and requests using them return 401 Unauthorized.
Bearer tokens cannot be used to mint another token. Only API keys can call POST /v1/auth/token.