Skip to content

Overview

Multi-tenant franchise platform API. All authenticated endpoints accept either a BearerAuth JWT (admin UI flows) or an ApiKey header (X-API-Key: kl_live_...) for programmatic access.

Informations

  • OpenAPI version: 3.1.0

Short-lived JWT access token (RS256, 15-min TTL) obtained from POST /v1/auth/login. Pass as Authorization: Bearer .

Security scheme type: http

Bearer format: JWT

Brand-scoped API key with prefix kl_live_. Issued per-brand via the admin UI (Settings → API Keys). Authorises all routes scoped to that brand. Machine-to-machine access is currently in private beta — contact your account representative to enable API key issuance for your brand.

Security scheme type: apiKey

Header parameter name: X-API-Key