Authenticate your requests
Generate an API key and send it with every call.
All endpoints authenticate via a bearer API key. The key resolves to the seller who owns it, and that seller is the account every request acts on.
Generate a key
- Log in to your SUQO seller account.
- Go to Configuration → API integration.
- Click Generate key. See API Integration in the user guide.
A key created while the dashboard is in Test mode is a sandbox key and only works against the sandbox host — see Test against the sandbox.
Send it on every request
| Header | Required | Value |
|---|---|---|
Authorization | Yes | Bearer <api_key> |
Content-Type | Yes (write ops) | application/json |
GET /api/v1/products/ HTTP/1.1
Host: be.suqo.ai
Authorization: Bearer <api_key>Check that it worked
GET /api/v1/products/ is the cheapest way to confirm a key: it is the only endpoint that works before your account is KYC-verified, so a 200 there proves the key itself is good even on a fresh account.
A 401 means the key is missing, malformed or inactive. A 403 means the key is fine but the owning account is not KYC-verified yet — see Errors for both shapes.
Security: Treat your API key as a password. Never share it in client-side code, public repositories, or insecure communication channels.