The AISoule REST API enforces secure, modern key authentication. Every outbound network query must provide a valid Bearer API Key in its headers.
https://app.aisoule.com).!WARNING For security, API keys are shown only once at generation time. Store them in a secure environment variables configuration vaults (like HashiCorp Vault or AWS Secrets Manager).
All REST requests must include your key in the standard HTTP Authorization header exactly as shown:
Authorization: Bearer YOUR_API_KEY
If your API key is misconfigured or has been revoked, the request returns a standard 401 Unauthorized code:
| Status Code | Error Code | Reason |
|---|---|---|
401 Unauthorized | unauthorized | The Authorization header is missing, malformed, or the token has been revoked. |
403 Forbidden | forbidden | The token has correct auth but lacks the required permissions scope to query the resource. |
# Authenticate request via Authorization Header
curl -X GET "https://api.aisoule.com/v1/profile" \
-H "Authorization: Bearer YOUR_API_KEY"