Improve API
If you're running Improve on a Javascript server environment it's recommended to use the Javascript SDK which interfaces with the API for you. If that doesn't work for you because of alternative server languages you can interface directly with the API.
The Improve API is split up in two parts;
Security
To make sure your usage is actually from you we protect endpoints in two different ways for server and client.
Server side
For server requests it's required to provider an API token as an header. This is linked to an organization and environment. This is intended for server requests only, when this is accidentally leaked to the client it's recommended to re-generate the token from the console.
Client side
Client side validation is done by CORS, from the console you can specify which origin is allowed to make requests per environment.