The Deskbolic API supports two primary methods of authentication depending on your integration type:
1. API Key Authentication (Server-to-Server)
For backend integrations, server scripts, and webhooks, generate an API Access Token from Settings → API & Integrations in your Deskbolic dashboard. Pass the token in the X-Api-Key request header:
curl -H "X-Api-Key: dsk_live_abc123xyz" \
https://api.deskbolic.com/v1/conversations2. JWT Bearer Token (Mobile & User Sessions)
For mobile apps and client-side applications, authenticate via POST /v1/sessions to obtain a JWT token, then pass it as a Bearer token:
curl -H "Authorization: Bearer YOUR_JWT_TOKEN" \
https://api.deskbolic.com/v1/meMulti-Tenant Account Context
If your user belongs to multiple workspaces, specify which workspace to target using the X-Account-Id header:
X-Account-Id: 3e1da942-7725-4c19-84da-2a8dde4948b9