Authentication

The Customer Integration API (https://api.commspliant.com) accepts organization API keys only.

Headers

Send your key using either header:

X-Api-Key: ck_YOUR_API_KEY

or

Authorization: Bearer ck_YOUR_API_KEY

JWT is rejected

User session tokens (JWT) from the admin app login flow are not accepted on integration render endpoints. Create a dedicated API key for server-to-server integration.

Permissions

API keys need the render.execute permission. Keys created in the admin UI are scoped to your organization automatically — you do not pass organizationId in URLs.

Where to create keys

Log in at app.commspliant.com and open API keys.

Store keys in your secret manager. Never commit them to source control or expose them in client-side browser code.