The API uses HTTP Basic authentication. Pass your API secret as the username and
leave the password empty. This is the same scheme Rewardful uses, so existing clients
work without changes.
Get your API key
Create a key in your dashboard at Developers → API keys
(referralful.com/dashboard/developers).
The secret is shown once. Keys look like rfl_live_… and are tied to one program.
Treat your secret like a password. It grants full access to your program’s data. If a
key leaks, revoke it in the dashboard and create a new one.
Send the key
With curl, pass the secret to -u followed by a colon (empty password):
Or set the Authorization header yourself (base64 of secret:):
A Bearer token is also accepted as a convenience:
Errors
A missing or invalid key returns 401:
