Authentication
The SiPhox API authenticates requests with an API token passed in the
Authorization header.
curl https://connect.siphoxhealth.com/api/v1/credits \
-H "Authorization: Token $SIPHOX_API_TOKEN"
warning
Your API token carries full access to your account. Keep it server-side, never commit it, and never expose it in client-side code.
Environments
There is no separate sandbox host. Both environments run on the same base
URL, https://connect.siphoxhealth.com; the token you send decides whether
the request is live or sandboxed.
| Environment | Base URL | Token |
|---|---|---|
| Sandbox | https://connect.siphoxhealth.com | Sandbox token, prefixed sk_sandbox_; mock data only |
| Live | https://connect.siphoxhealth.com | Live token; real kits, reports, and charges |
Generate and rotate both tokens from the API Integration section of the admin dashboard. Tokens can be revealed and regenerated there at any time; regenerating invalidates the previous token immediately. See Sandbox Testing for everything the sandbox token can do.