Base URL
All API requests are made to:Authentication
The Dolfin API supports two authentication methods:API Key (server-to-server)
Pass your API key in thex-dolfin-api-key header. Used by client backends for provisioning and management operations.
Bearer Token (browser-to-API)
Pass a session JWT in theAuthorization header. Used by end users after exchanging an auth code.
Organisation Context
Most endpoints require anx-dolfin-organisation-id header to scope the request to a specific organisation. Endpoints that operate across organisations (e.g. creating an organisation or listing industries) are exempt from this requirement.