Sifely Public API Authentication Guide

Sifely Public API uses API Key authentication. All API requests (except login) must include your API key in the Authorization header.

1. Getting Your API Key

Call the login endpoint with your Sifely account credentials to obtain an API key:

Method: POST

Path: /system/smart/login

Headers: Content-Type: application/json

Request Body

{
  "account": "your-email@example.com",
  "password": "md5-hashed-password"
}

Response Example

{
  "code": 200,
  "data": {
    "clientToken": "sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "clientId": "cli_xxxxxxxx",
    "account": "your-email@example.com",
    "plan": "DEVELOPER"
  }
}

The clientToken (prefixed with sk-) is your API key. Store it securely — it does not expire unless you manually rotate it.

Using Your API Key

Include the API key directly in the Authorization header for all subsequent requests:

⚠️ Note: Do not use the Bearer prefix. Send the raw sk-xxx key directly.

Rotating Your API Key

If your key is compromised, call the roll-token endpoint to generate a new one. The old key is immediately invalidated.

Method: POST

Path: /client/roll-token

Example Request

POST /client/roll-token
Authorization: sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

HTTP Status	Meaning
401	Invalid or missing API key
402	Subscription inactive (cancelled / expired)
429	Rate limit or quota exceeded

Rate Limit Headers

All error responses include the following headers for tracking your limits:

X-RateLimit-Limit

X-RateLimit-Remaining

X-RateLimit-Reset

Overview

Sifely Public API Authentication Guide#

1. Getting Your API Key#

Request Body#

Response Example#

Using Your API Key#

Rotating Your API Key#