Authentication

Generate an API key and authenticate your requests.

Generate an API key

1. Log in to your Tabillo workspace
2. Go to Settings → API Keys
3. Click Generate new key
4. Give the key a name (e.g. “Zapier integration”)
5. Copy the key immediately — it is shown only once

Store your API key securely. It will not be shown again after you close the modal. If lost, revoke it and generate a new one.

Using your key

Pass the key as a Bearer token in the Authorization header on every request. Also include your workspace slug in the x-tenant-slug header.

curl https://crossproductroadmapbackend.vercel.app/api/v1/workspace \
  -H "Authorization: Bearer tab_YOUR_KEY_HERE" \
  -H "x-tenant-slug: your-workspace-slug"

Finding your workspace slug

Your workspace slug is the subdomain of your Tabillo URL. If your workspace is at acme.tabillo.com, your slug is acme.

Revoking a key

Go to Settings → API Keys and click Revoke next to the key. It stops working immediately.

Error responses

Status	Meaning
401 Invalid or revoked API key	Key is wrong, revoked, or the tab_ prefix is missing
400 Tenant slug is required	Missing x-tenant-slug header
404 Organization not found	Slug doesn’t match any workspace
429 Rate limit exceeded	More than 1,000 requests in the current hour