AmDital supports API key authentication and OAuth 2.0 flows.
Pass your API key in the Authorization header:
curl https://v2-api.amdital.com/v1/workspaces \
-H "Authorization: Bearer amdital_sk_live_..."
# Or use the X-API-Key header
curl https://v2-api.amdital.com/v1/workspaces \
-H "X-API-Key: amdital_sk_live_..."The web app authenticates via an httpOnly session cookie set at login — not a client-readable token, so browser JS never calls a session-fetching API directly. Server-side route handlers read the verified session and forward it to the API:
// Server-side only — the session cookie is httpOnly
const accessToken = await getServerAccessToken()
const response = await fetch('https://v2-api.amdital.com/v1/workspaces', {
headers: {
Authorization: `Bearer ${accessToken}`
}
})| Plan | Rate limit |
|---|---|
| Free | 100 req/min |
| Starter | 1,000 req/min |
| Pro | 10,000 req/min |
| Enterprise | Unlimited |