Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.dualentry.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Authentication

All API requests must include an API key in the X-API-KEY header.

​
How It Works

  1. Your administrator generates an API key from the DualEntry dashboard
  2. Include the API key in the X-API-KEY header with every request
  3. The API validates the key and authorizes access to your organization’s data

​
Example Request

curl https://api.dualentry.com/public/v1/invoices \
  -H "X-API-KEY: your_api_key_here" \
  -H "Content-Type: application/json"

​
Getting an API Key

API keys are provisioned exclusively by your organization’s DualEntry administrator. Contact them to request one. Once you receive your key, store it securely in your application. The key is shown only once at creation time and cannot be retrieved later.
Security: Never expose API keys in client-side code, public repositories, or logs. Use environment variables or secure secret management services.

​
Authentication Errors

Status CodeMeaningSolution
401Missing API keyInclude X-API-KEY header
403Invalid or revoked API keyVerify your API key is correct and active
Error Response: 
{
  "success": false,
  "errors": {
    "__all__": ["API key authentication failed"]
  }
}

​
Best Practices

  • Store API keys in environment variables or secret management services
  • Use separate API keys for development and production environments
  • Rotate keys regularly for enhanced security
  • Never commit API keys to version control
Next: Learn about Rate Limiting →
Last modified on May 29, 2026