Authentication
All API requests must include a valid API key in theAuthorization header.
Getting an API Key
- Log in to Callem Studio
- Navigate to Settings > API Keys
- Click Create API Key
- Copy the key immediately — it will only be shown once
Using the API Key
Include the key in theAuthorization header as a Bearer token:
Key Format
API keys start withck_live_ followed by 60 random hexadecimal characters:
Security
- The full API key is never stored on our servers — only a SHA-256 hash
- The key is shown once at creation time
- Keys can be restricted by IP address (single IPs, CIDR ranges, or
*for all) - Keys can have an optional expiration date
- Each key is scoped to a single project
Common Errors
| Error | Cause | Fix |
|---|---|---|
401 Missing or invalid Authorization header | No Authorization header or wrong format | Add Authorization: Bearer ck_live_... |
401 Invalid API key format | Key doesn’t start with ck_live_ | Check the key format |
401 Invalid API key | Key not found (revoked or wrong) | Create a new key in Settings |
401 API key has expired | Key passed its expiration date | Create a new key |
403 IP address not allowed | Your IP isn’t in the allowed list | Update the key’s IP restrictions or use a whitelisted IP |