Authentication
All requests require a Bearer token:
Authorization: Bearer <api-key>
API keys are organization-scoped and carry explicit permission scopes:
| Scope | Permission | Grants Access To |
|---|---|---|
scoring | read | View guidelines, criteria, scorecards, scores |
scoring | read_write | Submit media for scoring + all scoring:read access |
aperture | read | Retrieve Creative Tags job status and results |
aperture | read_write | Submit assets for tagging + all aperture:read access |
A few endpoints require a valid API key but no specific scope: GET /v1/organization, GET /v1/permission, GET /v1/workspaces.
API keys are managed inside the Vidmob platform (Admin Settings). Per-organization throttling is applied to all endpoints; for current rate limits applicable to your account, contact Vidmob support.