Authentication | Taktoria API

The API accepts an organization-scoped API key as a bearer token:

Authorization: Bearer tk_live_...

Create keys in Settings → API keys. The secret is shown once, at creation: Taktoria stores only a SHA-256 hash of it, so a lost key must be rotated rather than recovered.

Scopes

A key carries a list of scopes. * grants everything; launches:* grants every launches action.

Scope	Grants
`launches:read` / `launches:write`	Launches, including the launch button
`steps:read` / `steps:write`	Launch steps, decisions, nudges, review queues
`artifacts:read` / `artifacts:write`	Press releases, dashboards, learnings
`insights:read` / `insights:write`	Post-launch learnings
`teams:read` / `teams:write`	Functional and organizational teams
`templates:read` / `templates:write`	The launch step template
`members:read`	Organization members
`seats:read` / `seats:write`	Per-app seat assignment
`apps:read`	Apps and subscription state

Subscriptions

App endpoints also require the organization to hold an active subscription for that app. Without one you get 402 subscription_required.