​

API Keys

​

Authentication Header

Authorization: Bearer dpl_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

​

API Key Format

​

Making Authenticated Requests

curl -X GET "https://api.getdoppel.ai/api/v1/clinics" \
  -H "Authorization: Bearer dpl_live_YOUR_API_KEY"

const API_KEY = 'dpl_live_YOUR_API_KEY';

const response = await fetch('https://api.getdoppel.ai/api/v1/clinics', {
  method: 'GET',
  headers: {
    'Authorization': `Bearer ${API_KEY}`,
    'Content-Type': 'application/json'
  }
});

import requests

API_KEY = 'dpl_live_YOUR_API_KEY'

response = requests.get(
    'https://api.getdoppel.ai/api/v1/clinics',
    headers={
        'Authorization': f'Bearer {API_KEY}',
        'Content-Type': 'application/json'
    }
)

​

Scopes

​

Clinic Restrictions

• The key can only access data for the specified clinics
• Requests for other clinics will return empty results
• This is useful for multi-location integrations

​

Security Best Practices

​

Do’s

• Store API keys in environment variables
• Use server-side code to make API calls
• Rotate keys periodically
• Use separate keys for development and production

​

Don’ts

• Never commit API keys to version control
• Never expose keys in client-side JavaScript
• Never share keys via email or chat
• Never use production keys for testing

​

Error Responses

​

Missing Authorization Header

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Missing Authorization header. Expected: Bearer <api_key>"
  },
  "request_id": "...",
  "timestamp": "..."
}

​

Invalid API Key

{
  "success": false,
  "error": {
    "code": "INVALID_API_KEY",
    "message": "Invalid API key"
  },
  "request_id": "...",
  "timestamp": "..."
}

​

Expired API Key

{
  "success": false,
  "error": {
    "code": "API_KEY_EXPIRED",
    "message": "API key has expired"
  },
  "request_id": "...",
  "timestamp": "..."
}

​

Getting an API Key

1. Contact your Doppel account manager
2. Specify your use case and required scopes
3. Receive your key via secure channel
4. Store it securely and start integrating!