Skip to main content
Every request to the Tanvik API is authenticated with an API key scoped to your client account. There is no separate OAuth flow — generate a key from your dashboard and pass it as a bearer token.

​
Getting your API key

1

Open your dashboard

Go to Settings → API Keys in your Tanvik dashboard at app.tanvik.io. This page only appears if your plan includes API access (Pro and Enterprise).
2

Generate a key

Click Generate Key. Your key is shown once, prefixed tvk_live_.... Store it somewhere safe — Tanvik does not display the full key again.
3

Rotate if needed

If a key is exposed, rotate it from the same page. Rotating replaces the key immediately; requests using the old key start failing right away.

​
Making authenticated requests

Pass your key as a bearer token in the Authorization header on every request:
Not sure which Windows tab to use? The two aren’t interchangeable — pasting one into the wrong shell fails with a ... is not recognized error. Use CMD only in classic Command Prompt. Use PowerShell if your terminal is PowerShell, Windows Terminal, or VS Code’s integrated terminal — the default on most modern Windows setups. The PowerShell example uses Invoke-RestMethod rather than curl.exe to avoid PowerShell’s known issues passing complex quoted JSON to external executables.
Never expose your API key in client-side code (browser JS, mobile apps). Route requests to the Tanvik API through your own backend.

​
Key scoping

Each key is tied to one client account and inherits that account’s plan limits and enabled channels. If you manage multiple businesses on Tanvik, generate a separate key per account rather than sharing one.

​
Rate limits

Each key is limited to 120 requests per minute. Requests beyond that return 429 with a Retry-After header — see Errors for the exact response shape.