Irisend
Docs

Authentication

Authenticate every Irisend API request with a Bearer API key in the Authorization header. Learn the ir_<prefix>_<secret> key format and how keys are hashed.

  • full_access keys can call every endpoint; sending_access keys can only call POST /emails and POST /emails/batch.
  • A key scoped to a domain can only send with a matching `from` address.
  • The token is shown once, at creation. Store it in a secret manager, not a repo.
  • Managing a sub-account? Add an Irisend-Account header with the sub-account's id to any request made with your own (parent)full_access key to act on its behalf — see Sub-accounts.