Authentication

Every API request must prove it comes from your business.

Get a key

1. Open the Kilo business dashboard.
2. Go to Settings → API & Webhooks.
3. Click Create API key.
4. Copy the key immediately. We show the full secret only once.

Keys look like sk_live_....

Send the key

Use either header (pick one):

Authorization: Bearer sk_live_YOUR_SECRET

or:

X-Api-Key: sk_live_YOUR_SECRET

Base URL

Partner API calls go to the business app host (same Vercel project as the dashboard), not a customer custom domain:

https://business.kiloapp.org/api/v1

Example create URL:

POST https://business.kiloapp.org/api/v1/deliveries

If auth fails

Safety rules for kids (and adults)

1. Never paste a live key into Slack, email, or a Discord screenshot.
2. Store it in environment variables on your server.
3. If it leaks, revoke it in the dashboard and create a new one.