Skip to main content

​
API Keys

All API endpoints accept an x-api-key header. Get your key from the dashboard under Kit Config → API Keys. 
curl https://schedkit.net/v1/auth/me \
  -H "x-api-key: sk_live_YOUR_KEY"
Keys are prefixed:
  • sk_live_ — production key
  • sk_test_ — test key (same API, isolated data)
Never expose your API key in client-side code or public repos. Use environment variables.

​
Session Cookies

The dashboard uses HTTP-only session cookies set by POST /v1/auth/login. Cookie auth is automatically used by browsers — no header needed. 
# Login and save cookie
curl -c cookies.txt -X POST https://schedkit.net/v1/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com","password":"..."}'

# Use session cookie
curl -b cookies.txt https://schedkit.net/v1/auth/me

​
Auth endpoints

MethodPathDescription
POST/v1/auth/loginLogin, set session cookie
POST/v1/auth/logoutLogout, clear session
GET/v1/auth/meGet current authenticated user

​
GET /v1/auth/me

{
  "id": 42,
  "email": "you@example.com",
  "name": "Your Name",
  "slug": "yourname",
  "plan": "starter",
  "timezone": "America/Chicago"
}

​
Error responses

Unauthenticated requests return 401: 
{ "error": "Unauthorized" }
Insufficient plan returns 403: 
{ "error": "Upgrade required", "upgrade": true }