Authentication

LeadTale uses API keys for authentication. Every request to the /api/v1/* namespace must include an Authorization: Bearer <key> header.

Key formats

Two key types:

• lt_live_... — Production. Real data, real billing.
• lt_test_... — Sandbox. Safe for development; no real-world side effects.

Both are 48 characters total: 8-character prefix (lt_live_ or lt_test_) plus 40 random alphanumeric characters.

Example (fake — do not use):

lt_live_AbCdEfGhIjKlMnOpQrStUvWxYz0123456789AB

Header format

Always Bearer scheme:

Authorization: Bearer lt_live_AbCdEfGhIjKlMnOpQrStUvWxYz0123456789AB

Other schemes (X-API-Key, query string, etc.) are not supported.

Where to get a key

Create one inside the LeadTale app at Account → Developer Settings → API Keys. The full key is shown once at creation and cannot be recovered — copy it immediately.

Security

• Treat keys like passwords. Never commit them to source control.
• Use environment variables or a secrets manager.
• If a key leaks, revoke it from the same Developer Settings page and create a new one.
• Keys may be optionally scoped to an IP allow-list — set this on the same page if you have a stable egress IP.