Authentication
All Presto public APIs use Bearer token authentication with API keys scoped per organization.
Bearer token
Section titled “Bearer token”Include your API key in the Authorization header:
Authorization: Bearer prst_live_a1b2c3d4...Key lifecycle
Section titled “Key lifecycle”- Keys are created by organization administrators under Organization → API Keys in the web portal
- Each key is authorized for a specific set of vendor models; administrators can change this set later from the key’s Edit page (a key must always keep at least one authorized model, and revoked keys cannot be edited)
- Keys can have an optional expiry date
- Keys are revocable (deactivation is immediate)
- The raw key is shown once at creation and cannot be retrieved again
Key prefixes
Section titled “Key prefixes”| Prefix | Environment |
|---|---|
prst_live_ |
Production |
prst_test_ |
Test/sandbox |
Base URL
Section titled “Base URL”Requests are scoped to a specific organization via its subdomain:
https://{organization}.app.presto.run/api/v1/The subdomain determines which organization’s data the request operates on. Your organization administrator will provide the correct base URL along with your API key.