Skip to main content
Leaf uses JWT (JSON Web Token) authentication. You exchange your API owner credentials for a token, then pass that token in the Authorization header of every request. For conceptual background — multiple environments, token usage patterns — see Authentication.

Base URL

Endpoints


Get a token

POST /authenticate Exchanges API owner credentials for a JWT token.

Request body

Token duration

When a token expires, request a new one from the same endpoint. There is no refresh token flow.

Request

Response

Using the token

Include the token in the Authorization header of every API request:

Error responses

Last modified on March 23, 2026