Authentication

API keys, environments, and permission scopes

Authenticate with X-API-Key or Authorization: Bearer …. Keys use the shape ew_<env>_<publicId>_<secret>. Only a hash of the full credential is stored.

requestHeaders

X-API-Key: ew_live_PUBLIC_ID_SECRET
Content-Type: application/json
Accept: application/json

Environments

PrefixBehavior

ew_test_…

Persists messages and simulates delivery. No live carrier traffic.

ew_live_…

Uses live queues, Kannel, and delivery reports.

Permissions

Messagingmessages:* · schedules:*

Contactscontacts:* · phonebooks:*

Templatestemplates:read · templates:write

Campaignscampaigns:read · campaigns:write

Bulk SMSbulk:read · bulk:write · bulk:export

Reportsanalytics:read · analytics:export

The full key is shown once at creation. Store it in a secret manager and prefer short-lived, least-privilege keys per service.