Authentication
Authentication
Section titled “Authentication”Kreyo uses API key authentication via the Authorization header.
API Key
Section titled “API Key”Include your API key in all requests:
Authorization: Bearer YOUR_API_KEYObtaining an API Key
Section titled “Obtaining an API Key”Sign up at kreyo.io to get your API key.
Scopes
Section titled “Scopes”API keys can have restricted scopes:
| Scope | Description |
|---|---|
verifactu:write | Submit VeriFactu registrations |
verifactu:read | Query VeriFactu records |
facturae:write | Generate FacturaE XML |
facturae:submit | Submit to FACe |
extract:write | Extract invoice data |
pdf:render | Generate PDFs |
Security Best Practices
Section titled “Security Best Practices”- Store API keys in environment variables
- Never commit keys to version control
- Rotate keys regularly
- Use restricted scopes for specific use cases