Authentication

Authenticate every request with an API key sent as a Bearer token. Create and revoke keys in Settings → API keys.

Authorization: Bearer nwl_live_xxxxxxxxxxxxxxxx

Example

curl https://api.northweblabs.com/v1/employees \
  -H "Authorization: Bearer nwl_live_xxx"

Security

• Keep keys server-side — never ship them in a browser or app.
• Keys inherit the permissions of the role that created them.
• Rotate keys regularly; revoking a key takes effect immediately.