Authentication

Sign in with POST /auth and use the returned token in your requests.

Get a token

Send your account email as username and your password in a JSON body to POST /auth. The response contains a token field. The getting started guide includes a complete example.

Use the token

Include these headers on protected requests:

Authorization: Bearer <token-from-auth-response>
Accept: application/vnd.KATSANA.v1+json

Your account permissions determine which fleets and vehicles you can access.

Test in the API reference

Browser requests are currently unavailable; use cURL or Postman. The API rejects CORS preflight requests with HTTP 405, so the reference’s Test Request panel cannot reach the operation. The getting started guide includes cURL examples, and the downloads include a Postman collection.

To sign in through the reference, open Sign in and get a token under Authentication, choose Test Request, and replace the prefilled username and password values with your account email and password. After a successful sign-in, the reference automatically fills its API token field. Protected Test Requests use that token; signing in again replaces it.

You can also paste or clear a token manually in the authentication panel. Paste only the token value; the reference adds the Bearer prefix. Credentials stay in memory for this page and clear on reload. They are not saved in the downloaded OpenAPI or Postman files. Clear the token when you finish.

Keep passwords and tokens in your application’s private environment. Never put them in URLs, source repositories or shared collections. Review an operation before sending a request that changes data.