Authentication

API Keys

All API requests require an API key for authentication.

Store your API key securely. Never commit it to version control or expose it in client-side code.

Include your API key in the Authorization header:

curl -X GET "https://your-workspace.plumi.ai/api/connections" \
  -H "Authorization: Bearer YOUR_API_KEY"

Or as a query parameter (for MCP connections):

https://your-workspace.plumi.ai/sse?api_key=YOUR_API_KEY

API keys inherit the permissions of the user who created them:

To revoke an API key:

Revoke keys immediately if you suspect they’ve been compromised.

{
  "success": false,
  "error": "Invalid or missing API key"
}

The API key is missing, invalid, or has been revoked.

{
  "success": false,
  "error": "Insufficient permissions"
}

The API key doesn’t have permission for this operation.