Authentication

Bearer token

Include your API key in every request:

curl -H "Authorization: Bearer sk_live_abc123..." \
  https://app.alana.shopping/api/workspace/{workspaceId}/brands

Status	Description
`401 Unauthorized`	Missing or invalid API key
`403 Forbidden`	Valid key but insufficient permissions for the requested workspace or action

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or expired API key"
  }
}