​

Authentication

​

Setup

1. Create an API key (Bearer token) in the Firmium dashboard.
2. Attach it to your requests.

​

Header

Authorization: Bearer <your_token>

​

Token format

• The token is an opaque string issued by Firmium.
• Treat it like a password — store it securely and do not share it.

​

Example request

curl -X GET https://www.firmium.de/api/v1/companies \
  -H "Authorization: Bearer <your_token>" \
  -H "Content-Type: application/json"

​

Errors

​

401 Unauthorized

{
  "error": "Ungültiges oder abgelaufenes Token",
  "code": "unauthorized"
}

​

403 Forbidden

{
  "error": "Unzureichende Berechtigungen",
  "code": "forbidden"
}

​

Best practices

1. Storage: Keep tokens out of git.
2. Rotation: Rotate and revoke unused tokens.
3. Errors: Handle 401/403 explicitly.
4. Rate limits: Back off when you hit rate limits.

​

Next steps

• Rate limits
• Error codes