Authenticate API Requests

Send authenticated requests to the Done Bear API with a JWT or API key.

Authenticate requests to the Done Bear API with a bearer token or API key.

Send a bearer header

Every API request uses the same header shape:


curl https://api.donebear.com/graphql \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  --data '{"query":"query { viewer { id email } }"}'

Use a CLI-created API key for automation

Create a key from the CLI:


donebear

Published with Blode.md

Authenticate API Requests

Send authenticated requests to the Done Bear API with a JWT or API key.

Authenticate requests to the Done Bear API with a bearer token or API key.

Send a bearer header

Every API request uses the same header shape:


curl https://api.donebear.com/graphql \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  --data '{"query":"query { viewer { id email } }"}'

Use a CLI-created API key for automation

Create a key from the CLI:


donebear

Published with Blode.md

Scope	Use it for
`read`	Listing and showing tasks, projects, labels, and teams
`write`	Creating and editing those records (`read` is included)
`admin`	Workspaces, billing, members, and API keys (`write` is included)

Response	Meaning	Fix
`401 {"error":"Authorization header required"}`	You did not send a bearer header	Add `Authorization: Bearer <token>`
`401 {"error":"Invalid authorization format"}`	The header is not `Bearer ...`	Fix the header format
`401 {"error":"Invalid API key"}`	The `db_` key is invalid or revoked	Create a new key or use another credential
`401 {"error":"Invalid token"}`	The JWT is invalid	Refresh the token or sign in again

Authenticate API Requests

Send a bearer header

Use a CLI-created API key for automation

Authenticate API Requests

Send a bearer header

Use a CLI-created API key for automation

Scoped permissions

Use a JWT for user-scoped requests

Common auth errors

Next steps