Company API Authentication
Company API credentials are scoped to one organization and should use the minimum permissions required.
Headers
Authorization: Bearer YOUR_API_KEY
Accept: application/json
Content-Type: application/jsonScopes
| Scope | Description |
|---|---|
| users:read | Read users. |
| users:write | Create and update users. |
| users:delete | Delete users. |
| training:read | Read training data. |
| phishing:read | Read phishing data. |
| reports:read | Read aggregate reports. |
Security
Keep company credentials on trusted servers only. Do not place keys in browser or mobile client code.