AffiliatePipe
Continue with Google

Partner API / Authentication

Authentication

Every request carries one of your keys as a bearer token.

GET /v1/stats HTTP/1.1
Host: api.affiliatepipe.com
Authorization: Bearer ap_live_...

About keys

  • Up to 3 active keys per partner, each with a label, so you can use one per project and revoke one without breaking the others.
  • A key is shown once. We store only a SHA-256 fingerprint and the first 12 characters, which is how keys appear on your dashboard.
  • Every key sees only your own data. There are no shared or organisation keys.
  • Revoke a key from the dashboard and it stops working on the next request.

Keeping keys safe

  • Never put a key in browser code, a mobile app or a public repository. Call the API from a server.
  • If a key might have leaked, revoke it and create another. It takes seconds.
HTTP/1.1 401 Unauthorized

{
  "error": "invalid_key",
  "message": "Missing, wrong or revoked key. Create one at https://affiliatepipe.com/dashboard/api"
}