Authenticating with the API

The Traceback API is authenticated using Laravel Sanctum personal access tokens, sent as a bearer token on every request.

Generating a token

1. Sign in to your Traceback account.
2. Go to Account Settings → API Tokens.
3. Create a new token and copy it — it is only shown once.

Sending the token

Add an Authorization header with the bearer scheme followed by your token (the scheme keyword is case-insensitive per the HTTP spec):

Authorization: bearer YOUR_TOKEN_HERE

For example, fetching your profile with curl:

curl https://your-domain.example.com/api/v1/user/profile \
  -H "Authorization: bearer YOUR_TOKEN_HERE" \
  -H "Accept: application/json"

Token scope and revocation

Tokens act on behalf of the user who created them, within whichever team is currently active for that user. Revoke a token at any time from Account Settings → API Tokens; revoked tokens are rejected immediately with a 401 Unauthorized response.

See Endpoints for the full list of routes available once you're authenticated.