API HESK API

Authentication

All /v1/* endpoints (except POST /v1/auth/token and health checks) require an API token bound to a HESK staff user:

Authorization: Bearer hsk_your_token_here

The token inherits that user’s categories, privileges, and admin flag. Create tokens after signing in.