Skip to main content
Customer-facing requests require your account ID and auth token on every request.
Use the same account ID in the URL path and the X-Auth-ID header. On Campaign Manager API pages, enter your token in the X-Auth-Token authentication field and your account ID in both account_id and X-Auth-ID. Mintlify keeps these values in the playground while you browse endpoints.
cURL
Store tokens in environment variables or a secret manager. Do not commit them or send them from browser code.

Internal authentication

Internal service-to-service endpoints use a separate secret:
Customers do not call /internal/* endpoints. Restrict the internal key to trusted services and rotate it separately from account credentials.

Content types

  • Send Content-Type: application/json for JSON request bodies.
  • Upload contacts as multipart/form-data with a file field named file.
  • Results and CDR exports return text/csv.