API Authentication

ROOTE API requests use the developer token described in Authentication.

Bearer authenticationCopy Anchor Link

Authorization: Bearer YOUR_API_TOKEN

Bearer is the default for persistent integrations. Endpoints that explicitly document query-token compatibility may also accept ?token=YOUR_API_TOKEN.

Access policies and scopesCopy Anchor Link

An endpoint can require authentication and a scope:

• geography:read for geography capabilities;
• mobility:read for mobility and urban services.

Access policy, scope checks, credits, and limits are enforced by the backend. See Credits & Limits.