> ## Documentation Index
> Fetch the complete documentation index at: https://help.wotnot.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate WotNot API requests with a Bearer token, find your account token in Developer settings, and send every call to api.wotnot.io.

### Before you start

To authenticate with the WotNot API, you need:

* A WotNot account
* Access to the account's **Developer** settings
* Your WotNot account token
* The WotNot API endpoint URL

## Get your account token

Your account token is available from the WotNot dashboard.

1. Log in to your **WotNot** account.
2. Go to **Settings**.
3. Select **Account Settings**.
4. Open the **Developer** section.
5. Copy your **Account Token**.

> [!WARNING]
>
> Your account token provides access to APIs associated with your WotNot account. Store it securely and treat it like a password.

![Screenshot 2026 09 08 143652](https://mintcdn.com/wotnot/PKybgkZax_5VziX5/images/Screenshot-2026-09-08-143652.jpg?fit=max\&auto=format\&n=PKybgkZax_5VziX5\&q=85\&s=55b41bc03836f741617df8894df32c93)

> [!WARNING]
>
> Never share your account token publicly or include it directly in browser-side code. Store it securely on your server or in an environment variable.

# API endpoint

All WotNot API requests are sent to:

```text theme={null}
https://api.wotnot.io
```

The endpoint path depends on the API operation you want to perform.

For example:

```text theme={null}
https://api.wotnot.io/v1/ai/knowledge-base
```

> [card] IMPORTANT
>
> Add [**https://api.wotnot.io/**](https://api.wotnot.io/) before the API you want to use

### Authenticate your requests

Pass your account token as a Bearer token in the `Authorization` header.

```http theme={null}
Authorization: Bearer <your_account_token>
```

For APIs that accept JSON, also include:

```http theme={null}
Content-Type: application/json
```

**Example API request:**

The following example creates a knowledge base using an authenticated request.

```bash theme={null}
curl --request GET \
  --url https://api.wotnot.io/v1/accounts/<account_id>/bots \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json'
```

```bash theme={null}
curl --request POST \
  --url https://api.wotnot.io/v1/ai/knowledge-base \
  --header 'Authorization: Bearer <your_account_token>' \
  --header 'Content-Type: application/json' \
  --data '{
    "name": "My Knowledge Base"
  }'
```

If the token is valid and the request is correctly formatted, WotNot processes the request and returns the API response.

### Authentication header

| Header | Value | Required |
| - | - | - |
| `Authorization` | `Bearer &lt;your_account_token&gt;` | Yes |
| `Content-Type` | `application/json` | Required for JSON requests |

> [!NOTE]
>
> Some endpoints use a different content type. For example, APIs that upload files or text sources may require `multipart/form-data`. Always use the content type specified by the individual endpoint.

# Common authentication errors

### **Invalid or missing token**

If the request does not contain a valid account token, the API may return an authentication error.

Example:

```json theme={null}
{
  "ok": false,
  "error": "UNAUTHORIZED",
  "status": 401,
  "message": "Invalid token. Provide the valid account token."
}
```

Check the following:

* The `Authorization` header is included.
* The value starts with `Bearer`.
* There is a space between `Bearer` and the token.
* The token is copied correctly.
* The token belongs to the WotNot account containing the resource you are trying to access.

### Avoid

Do not:

* Add the token directly to frontend or browser-side code.
* Commit the token to a public Git repository.
* Share the token in screenshots or documentation.
* Include the token in URLs or query parameters.
* Store the token in publicly accessible files.

> [!WARNING]
>
> If your token is exposed, treat it as compromised and contact WotNot Support for assistance.

## Authentication checklist

Before troubleshooting an API request, verify:

* [ ] You copied the correct account token.
* [ ] The `Authorization` header is present.
* [ ] The header uses the `Bearer <token>` format.
* [ ] You are using `https://api.wotnot.io` as the API host.
* [ ] The endpoint path is correct.
* [ ] Required headers are included.
* [ ] The resource belongs to the WotNot account associated with your token.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.