πŸ”
Authentication
How to authenticate your API requests

API Key (recommended for scripts & integrations)

Generate a key from the dashboard β†’ API tab. Pass it in every request header:

X-API-Key: df_your_key_here
curl -X GET https://app.dragonflyaccounts.net/api/profiles \
  -H "X-API-Key: df_your_key_here"

JWT Token (for browser / session auth)

Login via POST /api/auth/login to receive a 30-day JWT, then pass it as a Bearer token:

Authorization: Bearer eyJhbGci...

Auth levels used in this reference:

open β€” No authentication required
auth β€” Requires API key or JWT (any logged-in user)
admin β€” Requires admin role
ext β€” Requires EXT_TOKEN (browser extension only)