Authentication - Decimal

Every request needs an API token in the Authorization header:

curl https://api.getdecimal.ai/v0/me \
  -H "Authorization: Bearer sk-de-..."

A missing, invalid, or expired token gets 401 with code unauthorized.

API keys

Open Settings → API Keys and create a token with only the scopes it needs. Keep it on your server. Never ship it in browser or mobile code. To rotate a token, create a new one, move your traffic to it, then delete the old one.

Scopes

Each endpoint requires one scope. A token without it gets 403 with code forbidden.

Scope	Lets the token
`chat:write`	Send messages
`chat:read`	Read conversations
`chat:escalate`	Escalate a conversation to your helpdesk
`tickets:read`	Read synced tickets
`tickets:delete`	Delete synced tickets
`knowledge:read`	List, search, and read knowledge articles
`knowledge:delete`	Delete knowledge articles

GET /v0/me works with any valid token. Call it to see which scopes a token has:

{
  "token": {
    "name": "Support portal",
    "prefix": "sk-de-abc1",
    "scopes": ["chat:read", "chat:write"]
  },
  "organization": { "id": "..." }
}