> ## Documentation Index
> Fetch the complete documentation index at: https://developers.simplesell.de/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Create an API token and use it to authenticate your requests.

The SimpleSell API uses API tokens to authenticate requests. Each request must include a valid token. Otherwise, the API returns `401 Unauthorized`. See [Error handling](/api/v1/error-handling).

## Create an API token

<Steps>
  <Step title="Open the API token settings">
    Sign in to SimpleSell and go to [**API tokens**](https://app.simplesell.de/user/api-tokens).
  </Step>

  <Step title="Create a token">
    Create a new token and copy it.
  </Step>

  <Step title="Store the token securely">
    Store the token in a secure place, such as an environment variable or a secrets manager of your application.
  </Step>
</Steps>

You can create several tokens. Use a separate token for each integration, so you can delete one without affecting the others. Every token has full access to the API.

## Authenticate requests

Send your token as a bearer token in the `Authorization` header:

```bash theme={null}
curl https://api.simplesell.de/v1/shipping-methods \
  -H "Authorization: Bearer YOUR_API_TOKEN"
```

## Keep your token secret

Anyone with your token can access your SimpleSell account through the API. Treat it like a password:

* Only use the token in server-side code. Never embed it in a website, mobile app, or other client-side code.
* Don't commit the token to version control.
* If a token may have been exposed, delete it in your [API token settings](https://app.simplesell.de/user/api-tokens) and create a new one.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.