> ## Documentation Index
> Fetch the complete documentation index at: https://docs.firstwork.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate with the Firstwork API using API keys

## Overview

All Firstwork API requests must be authenticated using an **API key** passed in the `Authorization` header.

## API Key Authentication

Include your API key as a Bearer token in the `Authorization` header of every request:

```bash theme={null}
curl -X GET "https://your-instance.firstwork.com/external/v1/hiring-flow/" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"
```

## Obtaining an API Key

API keys are generated in the Firstwork dashboard:

### Navigate to API settings

Go to **Settings > API Keys** in your Firstwork dashboard.

### Generate a new key

Click **Generate New Key** and give it a descriptive name (e.g., "Production Integration", "Zapier Connector").

### Copy your key

Copy the API key immediately — it won't be shown again.

### Store securely

Store the key in a secure location such as an environment variable or secrets manager.

## Company Context

After authentication, all API calls are automatically scoped to the company associated with your API key. This ensures all data access is isolated to your organization — you cannot accidentally access another company's data.

## Permissions

API access respects your organization's permission model:

* Read permissions control which data can be queried
* Write permissions control which data can be modified
* Some endpoints require admin-level API keys


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.