Authentication

All API requests require a Bearer token in the Authorization header.

API keys

Get your API key from the Developer Dashboard.

Key prefix	Environment
`sqk_live_*`	Production — real credits, real data
`sqk_test_*`	Sandbox — no credits charged

Include your key in the Authorization header:

curl -X GET https://api.smartlyq.com/v1/me \
  -H "Authorization: Bearer sqk_live_xxxxxxxxxxxx"

Never expose your API key in client-side code, public repositories, or logs.

Each key can be limited to specific scopes. Available scopes:

Scope	Access
`articles:read`	List and get articles
`articles:write`	Generate and delete articles
`images:read` / `images:write`	Image generation and listing
`videos:read` / `videos:write`	Video generation and listing
`presentations:read`	List and get presentations
`presentations:write`	AI presentation generation
`social:read` / `social:write`	Social accounts, posts, queues, comments, DMs, reviews, validation, platform lookups
`audio:read` / `audio:write`	Text-to-speech, speech-to-text
`urls:read` / `urls:write`	URL shortening
`captain:use`	AI Captain conversations
`chatbot:use`	Chatbot management and messaging
`media:read` / `media:write`	Media library
`analytics:read`	Post, account, derived and inbox analytics
`webhooks:read` / `webhooks:write`	Webhook subscriptions, delivery logs, test and replay deliveries
`logs:read`	Your API request and webhook delivery history (`GET /logs`)
`jobs:read`	Async job status

If your key is missing or invalid, the API returns:

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Missing or invalid API key."
  }
}