Authentication

API key format

Item	Value
Prefix	`ck_`
Secret	64 hex characters
Header	`Authorization: Bearer ck_<secret>`
Content-Type	`application/json`

Example:

GET /v1/campaigns?page=1&limit=10 HTTP/1.1
Host: api.cloakup.me
Authorization: Bearer ck_0123456789abcdef...
Accept: application/json

Create keys in the dashboard. Keys are shown only once at creation.

Middleware applied to all /v1 routes:

Failure at any step returns 401 or 403. See Errors.

Each key has one or more scopes. The endpoint rejects requests when the key lacks the required scope.

Scope	Description
`campaigns:list`	List campaigns
`campaigns:create`	Create campaign
`campaigns:show`	Get campaign by ID
`campaigns:update`	Update campaign
`campaigns:delete`	Delete campaign
`campaigns:clone`	Clone campaign
`campaigns:toggle`	Toggle campaign active status
`domains:list`	List domains
`domains:create`	Register domain
`domains:verify`	Verify domain DNS/certificate
`domains:delete`	Delete domain

Presets in the dashboard:

Resource IDs are numeric (bigint). JSON may serialize them as numbers or strings depending on the serializer.