API authentication and rate limits
By Chris Winfield-Blum
•
August 18, 2026
The Si Forte API is available at https://siforte.com/api (or your environment's /api prefix). All documented endpoints require a Sanctum personal access token.
Authentication
Send the token as a Bearer header:
Authorization: Bearer {API_TOKEN}
Create tokens under Settings → API Tokens. Copy the token when it is created; you cannot view it again. You can delete unused tokens from the same page. Expired tokens are rejected.
Rate limits
Authenticated API routes are throttled to 60 requests per minute per user.
See How do I generate an API token? and API Documentation for core vault endpoints.