LayerRail API requests require a personal access token.
Send the token in the Authorization header:
Example:
Token scope
Tokens inherit access from the account and project permissions used to create them.
Use separate tokens for:
- Local development.
- CI.
- Production automation.
- Temporary scripts.
Rotate tokens
Rotate a token when:
- A teammate leaves.
- A laptop is lost.
- A CI provider is changed.
- A token may have been exposed.
Never paste API tokens into public issues, screenshots, browser recordings, or support messages.
