Authentication

Every request is authenticated with a bearer API key.

Sending a key

curl https://api.oneday.nya.je/v1/jobs \
  -H "Authorization: Bearer $ONEDAY_API_KEY"

Key format

Keys are prefixed by environment: od_live_ for production and od_test_ for sandbox. Treat keys as secrets and never embed them in client-side code.

Scopes

Scope	Allows
`jobs:read`	List and read jobs and run history.
`jobs:write`	Create, update and delete jobs.
`runs:trigger`	Trigger a run manually.

Rotating a key

Create the replacement key first, deploy it, then revoke the old key. Revocation takes effect immediately.

Requests with a missing or unknown key return 401. See Errors.