> ## Documentation Index
> Fetch the complete documentation index at: https://vobiz.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Campaign API authentication

> Authenticate customer-facing Campaign Manager requests and protect internal service endpoints.

Customer-facing requests require your account ID and auth token on every request.

```http theme={null}
X-Auth-ID: MA_XXXXXXXX
X-Auth-Token: YOUR_AUTH_TOKEN
```

Use the same account ID in the URL path and the `X-Auth-ID` header.

On Campaign Manager API pages, enter your token in the **X-Auth-Token** authentication field and your account ID in both `account_id` and `X-Auth-ID`. Mintlify keeps these values in the playground while you browse endpoints.

```bash cURL theme={null}
curl "https://campaign.vobiz.ai/api/v1/account/{account_id}/campaigns" \
  -H "X-Auth-ID: {account_id}" \
  -H "X-Auth-Token: {auth_token}"
```

<Warning>
  Store tokens in environment variables or a secret manager. Do not commit them or send them from browser code.
</Warning>

## Internal authentication

Internal service-to-service endpoints use a separate secret:

```http theme={null}
X-Internal-Key: YOUR_INTERNAL_KEY
```

Customers do not call `/internal/*` endpoints. Restrict the internal key to trusted services and rotate it separately from account credentials.

## Content types

* Send `Content-Type: application/json` for JSON request bodies.
* Upload contacts as `multipart/form-data` with a file field named `file`.
* Results and CDR exports return `text/csv`.