eSMS Mail API Keys and Authentication

Every request to the eSMS Mail API is authenticated with an API key.

Create a key

Under API keys, create a key. It's shown once — copy it. Keys are prefixed esms_k_ and stored hashed on our side.

Use it

curl "https://send.esmsafrica.io/v1/emails/" \
  -H "Authorization: Bearer esms_k_..." \
  -H "Content-Type: application/json" \
  -d '{ ... }'

Protect it

• Keep keys server-side — never ship them in a browser or mobile app.
• Store them in environment variables/secrets, not in source control.
• Rotate immediately if a key is exposed: create a new one, update your app, delete the old.

Each key is scoped to your account; you only ever see and send your own mail.