Base URL
Authentication
Almost every endpoint takes a bearer token:
The API reference tab notes which tokens each endpoint accepts, and which
scopes apply.
Getting a token
Mobile tokens come fromPOST /session. Series and event keys are issued from
the Attend dashboard by someone who owns the series or administers the event.
Global API tokens are issued by a superadmin.
Rate limits and errors
Errors are JSON, with anerror key describing what went wrong. A 401 means
the token is missing, expired or revoked; a 403 means the token is valid but
its scope or event doesn’t cover the request.