Start here
Authentication
Kestrel uses bearer tokens. Send your key in the Authorization header on every request.
Sending your key
curl https://api.kestrel.example/v1/calendars \
-H "Authorization: Bearer ktl_live_xxxxxxxx"Scopes
| Scope | Allows |
|---|---|
read | List calendars, slots and bookings |
write | Create and cancel bookings |
admin | Manage keys and webhooks |
Rotating keys
Create a new key, deploy it, then revoke the old one. Both work during the overlap, so rotation causes no downtime.
Tip Use a separate key per environment so you can revoke one without breaking the others.