Authentication

Use a tenant API key for a server integration, or a bearer token for a signed-in OnDi user. The credential determines the caller’s tenant and permissions. Use one authentication method per request: Authorization takes precedence when both headers are present.

The staging API base URL is https://staging-api.ondi.io/functions/v1.

Bearer Token

Send the access token in the Authorization header.

Authorization: Bearer $ONDI_ACCESS_TOKEN

Tenant API Key

Send an approved tenant API key using the exact header name X-API-Key.

X-API-Key: $ONDI_TENANT_API_KEY

Common Parameters

Many endpoints include tenant_id, language, page, limit, sort_by, sort_order, or column_filters query parameters. The endpoint pages preserve the exact request paths and list the captured parameters.

Using Request Examples

Set ONDI_BASE_URL=https://staging-api.ondi.io/functions/v1. Set ONDI_ACCESS_TOKEN or ONDI_TENANT_API_KEY when the example uses them. Other URL and header variables use uppercase shell names, such as TENANT_ID.

Replace placeholders in request bodies with your own values before sending a request. Required and optional labels are shown only when the contract specifies them. Optional filters are listed even when omitted from the default request. Signed upload examples use the upload URL returned by the preceding API call.

Tenant integration quickstart · Complete Markdown reference for tools and AI assistants