Authentication

The ChatMonster API uses API tokens. Send yours as a bearer token on every request.

Create an API token

1. Sign in to app.chatmonster.com.
2. Go to API Tokens.
3. Name the token and create it. Copy it right away, because it won't be shown again.

Treat tokens like passwords. Keep them on your server, never in browser code or a public repository. If a token leaks, delete it on the same page and create a new one.

Authorization: Bearer YOUR_API_TOKEN

A token acts as the user who created it, so it can reach the same organizations that user can. Tokens don't expire on their own, so delete any you no longer use.

Find your organization ID

List the organizations your token can access. This request doesn't need an organization header:

CHATMONSTER_TOKEN="your API token"

curl "https://api.chatmonster.com/v1/organizations" \
  -H "Authorization: Bearer $CHATMONSTER_TOKEN" \
  -H 'Accept: application/json'

Choose the organization

A token can have access to more than one organization, so requests for organization data also say which one they're for.

A request without this header gets a 400 response, and the token's user must belong to the organization or the request gets a 403.

CHATMONSTER_TOKEN="your API token"
CHATMONSTER_ORG_ID="your organization id"

curl "https://api.chatmonster.com/v1/locations" \
  -H "Authorization: Bearer $CHATMONSTER_TOKEN" \
  -H "X-ChatMonster-Organization-Id: $CHATMONSTER_ORG_ID" \
  -H 'Accept: application/json'