Authentication

The REST API uses workspace API keys. Send the key in one of these headers:

curl https://hooksnode.com/api/v1/projects \
  -H "Authorization: Bearer $HOOKSNODE_API_KEY"

curl https://hooksnode.com/api/v1/projects \
  -H "X-API-Key: $HOOKSNODE_API_KEY"

A key reaches only the projects of its workspace. A project in another workspace answers 404.

Errors

Status	Body	Meaning
`401`	`{"error":"API key required"}`	No key was sent.
`401`	`{"error":"invalid API key"}`	The key is wrong or revoked.
`403`	`{"error":"email_not_verified"}`	The person who made the key has not verified their email.
`403`	`{"error":"account suspended"}`	The workspace is suspended.

Each key can make 600 requests a minute. Over the limit, the API answers 429.

POST /p/<source-id> does not use API keys. Anyone with the URL can send events. To refuse unsigned events, turn on inbound signing.