Skip to main content
All API requests require a Bearer token in the Authorization header. Tokens are scoped to your team and provide access to all brands within your account.

​
Getting Your API Token

1

Navigate to API Access

Go to your Team Settings > API Access.
2

Create a new token

Click Create API Token and give it a descriptive name (e.g., “Marketing Dashboard”, “Data Warehouse”).
3

Copy and store securely

Your token will be shown only once. Copy it immediately and store it securely.
Keep your tokens secure! Never commit tokens to version control or share them publicly. If a token is compromised, revoke it immediately from the Integrations page.

​
Using Your Token

Include the token in the Authorization header with the Bearer prefix: 
curl -X GET "https://qwairy.co/api/v1/brands" \
  -H "Authorization: Bearer qw-api-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

​
Token Format

All Qwairy API tokens follow this format: 
qw-api-[32 hexadecimal characters]
Example: qw-api-a1b2c3d4e5f6789012345678abcdef01

​
Authentication Errors

Status CodeErrorDescription
401Missing authorization headerNo Authorization header provided
401Invalid authorization formatHeader doesn’t follow Bearer <token> format
401Invalid or expired tokenToken is invalid, revoked, or team is inactive

​
Example Error Response

{
  "error": "Invalid or expired token"
}

​
Best Practices

Use Environment Variables

Store tokens in environment variables, not in code.
export QWAIRY_API_TOKEN="qw-api-xxx"

Create Descriptive Names

Name tokens by their purpose for easy management.

Rotate Regularly

Delete and recreate tokens periodically for security.

Use Separate Tokens

Create different tokens for different integrations.

​
Managing Tokens

You can manage your API tokens from the Integrations page:
  • View tokens: See all active tokens with their last usage date
  • Delete tokens: Revoke access immediately by deleting a token
  • Create new tokens: Generate new tokens as needed
There’s no limit to the number of tokens you can create, but we recommend keeping only the tokens you actively use.