generated: '2026-10-18'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://www.hooksbase.com/docs/authentication
sources:
- https://www.hooksbase.com/docs/authentication
- https://www.hooksbase.com/guides/receive-stripe-webhooks
- https://www.hooksbase.com/docs/quickstart
- https://www.hooksbase.com/docs/onboarding
description: 'Hooksbase provides three authentication models: session auth for the dashboard, project API keys for the Public API, and webhook
  ingest secrets for sending events to a webhook’s ingest URL.'
schemes:
- type: other
  name: Dashboard session auth
  evidence: The Hooksbase dashboard uses your browser session. It is a product UI, not part of the Public API, and is not reachable with a project
    API key.
  how_to_obtain: Obtained automatically via browser login to the Hooksbase dashboard.
- type: http-bearer
  name: Project API key
  evidence: 'The Public API uses Authorization: Bearer swk_... . Use this for webhook configuration, delivery history, replay, usage, and other
    automation-friendly routes.'
  location: header
  header: Authorization
  how_to_obtain: Create a project API key in the dashboard under project settings or via the Public API.
- type: http-bearer
  name: Public ingest secret
  evidence: The public ingest surface uses the webhook's whsec_... secret against the webhook-specific ingest URL.
  location: header
  header: Authorization
  how_to_obtain: Returned once on webhook creation or when rotating the ingest secret.
docs: https://www.hooksbase.com/docs/authentication