API Reference

Authentication

Every API request authenticates with a workspace-scoped Bearer token. Tokens are tied to one workspace, never expire, and grant full access to that workspace until they're revoked.

Base URL

https://api.vsub.io

Bearer header

Pass the token in the standard Authorization header on every request:

Header

Authorization: Bearer vp_a1b2c3d4e5f60718293a4b5c6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f90

Creating a token

Open your workspace in the Vsub app.
Go to Settings, then the API Keys tab.
Click Create API key, give it a name (e.g. Production server), and confirm.
Copy the token immediately. It's shown once, Vsub stores only a hash, so you can't look it up later.

Revoking a token

From the API Keys tab, click Revoke on the row you want to disable. The change is immediate, every subsequent request using that token returns 401. Revocation cannot be undone, so issue a new token if you need to rotate.