Authentication
Every request to the KMP API is authenticated with a bearer API key.
Getting an API key
Generate one from your workspace settings. Keys are scoped to a single workspace and inherit the standard rate limit described in Rate limits.
Using the key
terminal
bash
curl https://api.kmp.kaiju.go.example/v2/pipelines \
-H "Authorization: Bearer $KMP_API_KEY"Never expose a key client-side
API keys carry full workspace access. Keep them server-side only — never embed one in a mobile app, browser bundle, or public repository.
Verifying webhook requests
Incoming webhook deliveries are authenticated differently: by a signed X-KMP-Signature header rather than your API key.