March 2025
New Authentication Model
We have replaced API key authentication with short-lived tokens and refresh flows. All existing API keys will continue to work until June 2025, but we strongly recommend migrating to the new model for improved security and granular scoping.
Migration example
// Before (v2.x)
const client = createClient({
apiKey: "sk_live_..."
});
// After (v3.0)
const client = createClient({
token: await getToken({
clientId: "cl_...",
clientSecret: "cs_...",
scopes: ["read", "write"]
})
});- API keys deprecated in favor of OAuth2 tokens
- New /auth/token endpoint for token exchange
- Scoped permissions per token
- Refresh token rotation with 7-day expiry