​

Authentication

All Senso API calls are secured with organisation-scoped API keys.
Send the key in the X-API-Key header on every request.

X-API-Key: tgr_live_a1b2c3d4e5...

No OAuth flows, no token refresh—just the one header.

​

1. Getting an API key

Keys are generated internally and emailed to authorised contacts.
If you don’t have one yet, email [email protected] with:

• Your organisation name
• A short description of your intended use

Keys are environment-specific:
tgr_test_… for testing, tgr_live_… for production.

​

2. Using the key

Add the header to every request:

curl -H "X-API-Key: tgr_live_abc123..." \
     https://sdk.senso.ai/api/v1/categories

JavaScript example:

await fetch("https://sdk.senso.ai/api/v1/search", {
  method: "POST",
  headers: {
    "X-API-Key": process.env.SENSO_API_KEY,
    "Content-Type": "application/json"
  },
  body: JSON.stringify({ query: "How do I refinance my mortgage?" })
});

​

3. Security tips

• Store keys in environment variables or a secret manager
• Never embed keys in browser or mobile apps
• Use separate keys for test and production
• Delete keys you no longer need

​

4. Troubleshooting

​

401 Unauthorized

{ "error": "Authentication required" }

The key is missing or malformed—check the header name and value.

​

403 Forbidden

{ "error": "Insufficient permissions" }

Your key exists but isn’t allowed to perform that action.
Contact [email protected] and include the full error response so we can adjust the permissions.

You’re now ready to make authenticated requests—happy building!