Skip to main content

Authentication

Most OnDi APIs are authenticated with a bearer token for an OnDi user session. External integrations can also use tenant API keys after a key is created, approved, and distributed to the integration owner.

Bearer Token​

Send the access token in the Authorization header.

Authorization: Bearer $ONDI_ACCESS_TOKEN

Tenant API Key​

Tenant API keys are used by approved service integrations. Depending on the endpoint definition, the header appears as X-APIKey or X-API-Key.

X-APIKey: $ONDI_TENANT_API_KEY

Common Parameters​

Many endpoints include tenant_id, language, page, limit, sort_by, sort_order, or column_filters query parameters. The endpoint pages preserve the exact request paths and list the captured parameters.