# Overview

The superglue REST API lets services, scripts, and agents manage resources and execute tools programmatically.

## API endpoint

The cloud-hosted API endpoint is `https://api.superglue.cloud`. REST routes are versioned under `/v1`, so direct API requests use this base URL:

```text
https://api.superglue.cloud/v1
```

**Note:** Enterprise and self-hosted API URLs may vary. Ask your superglue agent to confirm the API endpoint
  configured for your deployment before integrating.

## Authentication

Open **API Keys** under **Control Panel**, create an API key, and send it as a bearer token with every request:

```bash
curl "https://api.superglue.cloud/v1/tools" \
  -H "Authorization: Bearer YOUR_API_KEY"
```

Treat API keys as secrets. Keep them out of client-side code, source control, and query parameters.

Webhook providers that cannot set an `Authorization` header may instead use the `token` query parameter on `/hooks/{toolId}`. In that case, treat the complete webhook URL as a secret.

## OpenAPI specification

The [OpenAPI specification](/openapi.yaml) is the source of truth for the [Endpoints reference](/docs/api/endpoints/) and generated SDK clients. You can also import it into any OpenAPI-compatible client or code generator.