Getting a Token
You can get an authentication token using the CLI:Using Tokens
Include your token in theAuthorization header of every request:
Token Lifecycle
Tokens are JWTs issued by Clerk and have a limited lifetime. The CLI automatically refreshes tokens when needed. If you receive a401 Unauthorized response, re-authenticate:
Request Headers
| Header | Required | Description |
|---|---|---|
Authorization | Yes | Bearer token for authentication |
Content-Type | For POST/PUT | application/json for JSON bodies, multipart/form-data for file uploads |
Example: Authenticated Request
Multi-Tenant Isolation
Your token identifies your organization. All API requests are automatically scoped to your organization’s namespace. You cannot access resources belonging to other organizations.Error Responses
| Status | Meaning |
|---|---|
401 Unauthorized | Missing or invalid token |
403 Forbidden | Token valid but lacks permission for the requested operation |