Getting an API key
- Log in to the Aeolian dashboard
- Go to Settings → API Keys
- Click Create API Key
- Copy the key immediately - it won’t be shown again
Never expose API keys in client-side code or public repositories. Store them in environment variables and make requests from your server.
Using your API key
Include the key in the Authorization header:
curl https://admin.aeoliancms.com/api/v1/products \
-H "Authorization: Bearer ak_your_api_key"
Each key is scoped to a single store - you don’t need to specify a store ID in requests.
Pausing keys
You can pause an API key from the dashboard without deleting it. Paused keys are rejected during authentication - requests will return a 401 with Invalid API key.
This is useful for temporarily disabling access (e.g., during maintenance or if you suspect a leak) while keeping the option to re-enable later.