API
API authentication
Create a key and send it as a bearer token.
Create a key
In the portal under API, generate a key. It is shown once. Store it in your secret manager. Revoke keys you no longer use.
Call the API
Authorization: Bearer YOUR-KEY against the Steady API base URL (the same host as the customer API, /api/v1/…). Missing or invalid keys return 401. The storefront never talks to underlying systems directly — only the Steady API.