Authentication & Security
The Sanctions API uses API keys to authenticate API requests.
Each request must contain your organization's API key via an apiKey parameter or header.
API Key
The apiKey may be sent in 2 ways
- Request Body - Include an
apiKeyparameter within the API request. - Request Header - Include an
apiKeyrequest header (opens in a new tab) with each request.
For examples of apiKey request parameters and headers, see the example requests
and the Postman Collection example on Github.
Security
All API requests must be made over HTTPS. Unencrypted HTTP requests will be rejected.