API Reference

All API requests require authentication using a Bearer token. Include your token in the Authorization header:

Authorization: Bearer YOUR_ACCESS_TOKEN

You can also use API keys for server-to-server communication. API keys should be passed in the X-API-Key header:

X-API-Key: sk_your_api_key_here

Unlike a session token, an API key only reaches the endpoints its scopes allow. Grant the narrowest set that does the job — a key that only reads results cannot modify or delete a survey if it leaks.

surveys:read     List and read surveys
surveys:write    Create, update, delete and publish surveys
responses:read   Read responses, analytics and exports

A request whose key is missing a required scope returns 403 and names the scope it needed.