Skip to main content
The API uses HTTP Basic authentication. Pass your API secret as the username and leave the password empty. This is the same scheme Rewardful uses, so existing clients work without changes.

​
Get your API key

Create a key in your dashboard at Developers → API keys (referralful.com/dashboard/developers). The secret is shown once. Keys look like rfl_live_… and are tied to one program.
Treat your secret like a password. It grants full access to your program’s data. If a key leaks, revoke it in the dashboard and create a new one.

​
Send the key

With curl, pass the secret to -u followed by a colon (empty password):
Or set the Authorization header yourself (base64 of secret:):
A Bearer token is also accepted as a convenience:

​
Errors

A missing or invalid key returns 401: