API authentication
Issue scoped, expiring API tokens for trusted server-side workflows.
Create a token
Use Dashboard → API Tokens. Select only the scopes your automation needs and choose an expiry where appropriate. Store the raw token at creation time; the full value is not shown again.
Tokens are bound to the workspace where they were created. Changing the selected dashboard workspace does not move an existing token.
curl -H 'Authorization: Bearer YOUR_API_TOKEN' \
https://pantherhook.com/api/v1/formsServer-side use only
Pass Authorization: Bearer on server-to-server API v1 requests. Do not embed tokens in browser JavaScript or send them to third-party URLs.
A missing permission returns 403; invalid, expired or revoked credentials return 401. API requests obey role, scope and plan constraints.
Open API TokensBrowse API endpoints
The readable API reference lists endpoints, scopes, and examples. For tools that need the machine-readable OpenAPI schema, there is a separate, clearly labeled download on that page.
Read API reference