Skip to main content
All API requests require a Bearer token in the Authorization header.

Making authenticated requests

Include your API key in every request:
curl -X POST https://api.clevis.dev/v1/payroll/calculate \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ ... }'
Keep your API key secret. Do not expose it in client-side code, public repositories, or browser-accessible environments.

Rate limits

Each API key is limited to 120 requests per minute by default. When exceeded, the API returns a 429 status with the RATE_LIMIT_EXCEEDED error code.

Authentication errors

CodeHTTPDescription
MISSING_AUTH_TOKEN401No Authorization header provided
INVALID_API_KEY401The API key is not in the allowed list
RATE_LIMIT_EXCEEDED429Too many requests per minute
{
  "error": {
    "code": "MISSING_AUTH_TOKEN",
    "message": "Authorization header is required",
    "details": {},
    "request_id": "01HX9B2KM3..."
  }
}

Request ID

Every API response includes a unique request_id (in the response body and the X-Request-ID header). Include this ID when contacting support to help us trace your request through our logs.