REST API

The REST API for Webfuse allows you to manage your company, spaces, settings, clients and more using the familiar format.

API Schema

The lates API documentation is rendered by Swagger:

• REST API Docs.
• REST API Schema.

Authentication

There are two types of authentication for the REST API:

• Space Key (prefixed with rk_)
  This key is used to manage A SPECIFIC space and all related objects.
• Company Key (prefixed with ck_)
  This key is used to manage your company and ALL of your spaces.

Both keys are used in the Authorization header. For example:

Authorization: Token rk_your_space_key

Bearer works in place of Token as well, so the same header format can be used for the Session MCP Server.

Caution

A REST Key is a powerful key and should be kept secret. Never expose it to third parties or share it in public repositories. If you want to use client side integration make sure to use the Widget API and its associated Widget Key instead.

The Session MCP Server accepts a Space REST key as well, but the recommended credential for agents is the Space’s Automation key, which only grants Session automation. See Session MCP Authentication.