How do I create API keys and use OAuth2?
Generate scoped API keys (shown once, hashed at rest), edit, rotate or revoke them; or register an OAuth2 client to exchange a client id + secret for short-lived access tokens with refresh.
~4 min read · For admin
How do I use the ASHR.work API?
Create an API key with the scopes you need, send it as a Bearer token to /api/v1, and read or write your workspace data — with cursor pagination, idempotent writes and RFC 9457 errors.
~5 min read · For admin
How do webhooks work?
Register an endpoint and pick events; ASHR sends a signed POST when they happen. Verify the X-Demystify-Signature HMAC with the secret shown once, and reject stale or unsigned requests.
~3 min read · For admin