Authentication

All API requests require a Bearer token in the Authorization header.

Base URL

https://api.loomal.ai

Include your API key in every request:

curl https://api.loomal.ai/v0/messages \
  -H "Authorization: Bearer mgent-your-api-key"

mgent-{64 hex characters}

API keys are created when you create an Identity in the console. The full key is shown only once — store it securely.

{
  "error": "unauthorized",
  "message": "Missing or invalid Authorization header",
  "status": 401
}

{
  "error": "unauthorized",
  "message": "Invalid API key",
  "status": 401
}

{
  "error": "forbidden",
  "message": "Missing required scope: mail:send",
  "status": 403
}

API requests are rate-limited per identity. Current limits:

Limit	Value
API requests	200/minute per identity
Auth attempts	60/minute per IP

Rate limit headers are included in responses: