Authentication

The API authenticates requests with an API key. Get yours by contacting ai@intu.com.au — service accounts are required to obtain a key.

Provide your key in the Authorization header of every request. Both the Token and Bearer schemes are accepted:

Keep your key secret — it carries the full entitlements of your subscription. A missing or invalid key returns 401:

Keys can be rotated or revoked from the admin console. Webhook payloads are separately signed with an HMAC secret — see Webhooks.

cURL

curl "https://ai.intu.com.au/api/v1/subjects" \
  -H "Authorization: Token token=sk_intu_api_<your_api_key>"

cURL

# Bearer also works
curl "https://ai.intu.com.au/api/v1/subjects" \
  -H "Authorization: Bearer sk_intu_api_<your_api_key>"

Response

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "Authentication failed"
  }
}