Skip to main content

Base URL

All API requests are made to:

Authentication

The Dolfin API supports two authentication methods:

API Key (server-to-server)

Pass your API key in the x-dolfin-api-key header. Used by client backends for provisioning and management operations.

Bearer Token (browser-to-API)

Pass a session JWT in the Authorization header. Used by end users after exchanging an auth code.

Organisation Context

Most endpoints require an x-dolfin-organisation-id header to scope the request to a specific organisation. Endpoints that operate across organisations (e.g. creating an organisation or listing industries) are exempt from this requirement.

Errors

The API returns errors in RFC 7807 Problem Details format:

Pagination

List endpoints support cursor-based pagination: