Skip to main content
Flowxi uses Bearer tokens to authenticate API requests. Tokens are issued after a successful login or registration. ⚠️ Tokens are shown only once at creation time. Copy and store them securely — they cannot be retrieved later.

​
🔑 How authentication works

  • Pass your token in the Authorization header using the Bearer scheme.
  • No username or password is sent on API requests.
  • All requests must be made over HTTPS. Plain HTTP requests are rejected.
  • Missing, invalid, or expired tokens return 401 Unauthorized.
❗️ Tokens grant full access to the account. Never expose them publicly, in logs, or in internal tools.

​
Sandbox environment

  • Sandbox tokens are scoped to a single developer account.
  • Sandbox tokens are isolated and never shared with other team members.
  • Production and sandbox tokens are strictly separated.

​
Example request

curl --location 'https://api.flowxi.app/api/v1/auth/devices' \
  --header 'Content-Type: application/json' \
  --header 'Authorization: Bearer <ACCESS_TOKEN>'