Skip to main content
The Drumtix API uses API keys for authentication. Every request must include a valid key in the Authorization header.

​
Generating an API key

  1. Go to Settings → API in your dashboard
  2. Click Generate Key
  3. Copy the key immediately — it is only shown once

​
Making authenticated requests

Pass your API key as a Bearer token in the Authorization header: 
curl https://app.drumtix.com/api/v1/events \
  -H "Authorization: Bearer YOUR_API_KEY"

​
Key permissions

API keys have read access to all data within your organisation. Write operations (creating or modifying events) are not currently supported via the API.

​
Rotating a key

If your key is compromised:
  1. Go to Settings → API
  2. Click Revoke next to the key
  3. Generate a new key
  4. Update any integrations using the old key
Revoked keys are immediately invalidated — requests using them will return 401 Unauthorized.

​
Security

  • Store API keys in environment variables, not in source code
  • Never expose API keys in client-side JavaScript or public repositories
  • Rotate keys periodically as a security best practice