Quickstart

API keys are workspace-scoped and carry explicit permission scopes. Grant only the least-privilege scopes your integration needs — for a read-only start, documents:read is enough. You'll see the raw key once, so copy it immediately.

Send your key as a Bearer token in the Authorization header. The base URL for all endpoints is:

https://www.digitalstack360.com/api/v1

curl https://www.digitalstack360.com/api/v1/documents \
  -H "Authorization: Bearer dsk_live_••••••••••••••••"

Responses are paginated JSON — up to 50 items per page by default.

{
  "data": [
    {
      "document_id": "doc_abc123",
      "title": "Q4 Solution Brief",
      "document_type": "vsow",
      "workflow_state": "in_review",
      "is_frozen": false,
      "created_at": "2026-01-10T12:00:00.000Z"
    }
  ],
  "meta": { "total": 1, "page": 1, "per_page": 50 }
}

Keep the key in an environment variable or secret manager (the examples read $DS_API_KEY) — never commit it. If a key is exposed or no longer needed, revoke it from API Keys; revocation takes effect immediately. There's no in-place rotation — create a new key, migrate, then revoke the old one.