Authentication

Every request needs a company API key as an HTTP Bearer token.

Header

Authorization: Bearer tt_live_…

Key identity

Keys act as the user who created them. Membership, board visibility, and activity logging follow that user. A key cannot access workspaces outside its company.

Entitlement

Company must have API access enabled ($20/mo add-on).
Company billing must not be hard-locked (expired trial / canceled / payment required).
Revoked keys return 401.

Base URL

Use your Team Tasks deployment origin (the same host as the web app), not docs.team-tasks.io.

# Production example
https://app.team-tasks.io

# Local
http://localhost:3000