Authentication

Every request needs one header:

  • Authorization: Bearer <token> — the token is base64(org_uuid:secret). Casap provides both during onboarding. The secret is static; it does not expire or rotate automatically.