Skip to main content
Every request to the Sevalla API must include a valid API key in the Authorization header.

​
Get an API key

1

Open the dashboard

Go to API Keys in your Sevalla dashboard.
2

Create a key

Click Create API Key, give it a name, and select the permissions it needs.
3

Copy the key

You’ll only see the full key once. Store it somewhere safe.

​
Using the key

Pass your API key as a Bearer token in the Authorization header: 
curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://api.sevalla.com/v3/applications
All requests must use HTTPS. HTTP requests will be rejected.

​
Scoped keys

API keys can be scoped to specific permissions. Create a key with only the access it needs, for example read-only for monitoring or deploy-only for CI pipelines. You can manage keys through the API or from the dashboard.
Create a separate API key for each integration or environment. If a key is compromised, you can rotate or revoke it without affecting your other tools.

​
Error responses

If authentication fails, you’ll get one of these responses:
StatusMeaning
401 UnauthorizedMissing or invalid API key. Check that your Authorization header is formatted correctly.
403 ForbiddenThe API key is valid but doesn’t have permission for this action. Create a key with broader scope or contact your team admin.