The Sadakom API uses JWT bearer tokens. Obtain one from POST /api/auth/login/ with your account credentials; the response includes an access token (60-minute lifetime) and a refresh token (30 days).
Send the access token as `Authorization: Bearer <token>` on every subsequent request. When it expires, POST the refresh token to /api/auth/refresh/ for a new pair — refresh tokens rotate on every use.
For server-to-server integrations, request a scoped API key from Settings → Developers instead of using a user's login token directly.