Authorization

To authenticate requests, you must include two headers in every API call:

• Authorization: Bearer $clientSecret: Your integration secret provided by us. This secret is unique per POS provider.

• venue-api-key: A venue-specific key that identifies the restaurant making the request.

Both headers are required for all requests. If either header is missing or invalid, the API will return a 403 Forbidden response.