Platform Authentication

​

Platform UI access (SSO)

​

Programmatic access with a platform access token

​

Create a platform access token

​

Authenticate

curl https://api.caylex.ai/api/v1/projects \
  -H "Authorization: Bearer $CAYLEX_PLATFORM_TOKEN"

import os
import requests

BASE_URL = "https://api.caylex.ai/api/v1"
TOKEN = os.environ["CAYLEX_PLATFORM_TOKEN"]

response = requests.get(
    f"{BASE_URL}/projects",
    headers={"Authorization": f"Bearer {TOKEN}"},
)
response.raise_for_status()
for project in response.json():
    print(project["name"])

const BASE_URL = "https://api.caylex.ai/api/v1";
const TOKEN = process.env.CAYLEX_PLATFORM_TOKEN;

async function main() {
  const response = await fetch(`${BASE_URL}/projects`, {
    headers: { Authorization: `Bearer ${TOKEN}` },
  });
  if (!response.ok) throw new Error(`HTTP ${response.status}`);
  const projects = await response.json();
  projects.forEach((p) => console.log(p.name));
}

main();

​

What you can manage

​

Worked examples

​

Security best practices

• Keep tokens server-side. Call the Platform API from your backend or CI only, never from a browser or mobile client.
• Use a secret manager. Store tokens in your CI provider’s secrets or a secret manager, not in code or .env files committed to git.
• Set an expiry. Give tokens an expiry date where possible, and create separate tokens for separate systems so you can revoke one without disrupting others.
• Rotate and revoke. Rotate tokens periodically, and revoke any token immediately from the Administration page if it may be compromised.

​

Next steps