Authentication - Kavenio

Kavenio API requests use bearer authentication.

Authorization: Bearer <token>

Use a Clerk session token for user-facing app flows or a Kavenio API key for server-to-server integrations where the endpoint supports API-key access. Never send provider OAuth tokens, refresh tokens, platform app secrets, or raw encrypted credential values to Kavenio API endpoints. Most /v1 endpoints require authentication. Public OAuth callback endpoints are documented with public security metadata in the generated OpenAPI reference. Authentication failures return the standard error envelope:

{
  "ok": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Authentication failed."
  }
}