Authentication

Choose the credential that matches your integration surface.

Credential types

Credential	Used by	Send as	Created
`Client API key (awaken_…)`	`Consumer API`	`x-api-key or Authorization: ApiKey`	`Settings → API Keys`
`Partner API key`	`Embedded Taxes`	`x-api-key or x-client-id + x-api-secret`	`Issued by Awaken`
`Firebase bearer`	`Awaken web app only`	`Authorization: Bearer`	`Not available to integrations`

Client API keys

Create a Read or ReadWrite key in Awaken under Settings → API Keys. The raw key is shown once and is scoped to one client. Send it with x-api-key or Authorization: ApiKey <key>.

bash

curl https://api.awaken.tax/graphql \
  -H "content-type: application/json" \
  -H "x-api-key: $AWAKEN_API_KEY" \
  --data '{"query":"query { getMyClients { id name } }"}'

Partner keys

Partner credentials are issued during onboarding. Use either x-api-key or the x-client-id and x-api-secret pair. Never expose these credentials in browser code; call Awaken from your server.

Firebase bearer tokens are not integration credentials

They authenticate the Awaken web application and are intentionally unsupported for API integrations.