API Keys and Authentication

The eSMS Africa API uses API keys for authentication. Keep your keys secret and rotate them if they are ever exposed.

Working with API keys

• Generate a key from the dashboard.
• Send it in the Authorization header of each request.
• Never expose keys in client-side code or public repos.
• Rotate keys periodically and revoke unused ones.

Every API request is logged with an audit trail so you can monitor usage.