Authentication

Overview

Cascade uses bearer tokens. You create a key in the dashboard, send it in the Authorization header, and treat it like a password: it grants full access to your account.

API keys

Keys come in two kinds. A live key touches real data; a test key touches a sandbox. Both are shown once, at creation, and never again.

Making a request

Send the key as a bearer token:

 const res = await fetch("https://api.example.com/v1/entries", {   headers: {     Authorization: `Bearer ${process.env.API_KEY}`,   }, });  const data = await res.json();

Rotating a key

Create the new key, deploy it, then revoke the old one. Doing it in that order means zero downtime.