Authentication

​

Creating an API key

​

Using your API key

curl -X GET "https://hub.banditshq.com/api/v1/tables" \
  -H "Authorization: Bearer lasso_your_api_key_here"

import LassoClient from "@lasso-ai/sdk";

const client = new LassoClient({
  apiKey: "lasso_your_api_key_here",
});

from lasso import LassoClient

client = LassoClient(api_key="lasso_your_api_key_here")

​

Key format

​

Security best practices

• Store API keys in environment variables, not in source code.
• Use a separate key per environment (development, staging, production).
• Rotate keys periodically and deactivate unused ones.
• Keys are scoped to a single company. All resources accessed through a key belong to that company.

​

Error responses

{
  "status_code": 401,
  "error_type": "unauthenticated",
  "message": "Missing or invalid Authorization header. Use: Bearer lasso_...",
  "request_id": "550e8400-e29b-41d4-a716-446655440000"
}