Authentication

All requests require a Bearer token:

Authorization: Bearer <api-key>

API keys are organization-scoped and carry explicit permission scopes:

ScopePermissionGrants Access To
scoringreadView guidelines, criteria, scorecards, scores
scoringread_writeSubmit media for scoring + all scoring:read access
aperturereadRetrieve Creative Tags job status and results
apertureread_writeSubmit assets for tagging + all aperture:read access

A few endpoints require a valid API key but no specific scope: GET /v1/organization, GET /v1/permission, GET /v1/workspaces.

API keys are managed inside the Vidmob platform (Admin Settings). Per-organization throttling is applied to all endpoints; for current rate limits applicable to your account, contact Vidmob support.