Skip to content

Authentication

The Saiku Cloud API uses Bearer-token authentication. Every request to https://api.saiku.bi/me/* carries an API key that identifies your tenant.

Base URL

https://api.saiku.bi

Minting an API key

  1. Open the API keys page from the dashboard sidebar.
  2. Click Create key.
  3. Give the key a label (e.g. production-agent, staging-bot).
  4. Copy the secret immediately — we only show it once. After this point the dashboard shows only the key ID + label.

Making a request

Send the key in the Authorization header:

Terminal window
curl https://api.saiku.bi/me/tenant \
-H "Authorization: Bearer sk_live_abc123…"

Successful response:

{
"tenantId": "81e301f2-…",
"tenantSlug": "acme",
"tier": "team",
"connectionName": "production-warehouse"
}

Rate limits

Rate limits are per-tenant, not per-key. The limits scale with your plan:

TierPer minutePer hour
Starter601 000
Team30010 000
Business1 00050 000
EnterpriseCustomCustom

When you hit a limit, we return 429 Too Many Requests with a Retry-After header indicating when to retry.

Error response shape

Every error response is JSON:

{
"error": "payment_required",
"message": "This feature requires an active subscription or trial. Visit /billing to start your 14-day trial."
}

Common error codes:

StatusCodeMeaning
401unauthorizedAPI key missing or invalid
402payment_requiredTenant has no active subscription
403forbiddenAPI key valid but lacks permission for this resource
404not_foundResource doesn’t exist (or isn’t visible to your tenant)
429rate_limitedPer-minute or per-hour limit exceeded

Rotating a key

  1. On the API keys page, click Create key to mint a new one. Give it the same label as the key you’re rotating.
  2. Update your agent / integration to use the new key.
  3. Once you’ve confirmed the new key works in production, return to the API keys page and revoke the old one.

There’s no downtime — both keys are valid simultaneously until you revoke the old one.

What’s next

  • Use the Billing API to manage your subscription programmatically.
  • Read about tenant isolation to understand what an API key can and can’t reach.