Authentication
Every request carries one of your API keys as a Bearer token.
curl https://fieldnova.in/api/v1/ping -H "Authorization: Bearer fn_test_YOUR_TEST_KEY"Test and live keys
fn_test_...— sandbox. Never dispatches a Partner, never moves money.fn_live_...— real orders, paid from your company wallet / credit.
Keys are created in the business dashboard → Developers by the company owner or an admin, after FieldNova has switched API access on for your company. A key is shown once; we store only a fingerprint of it, so we cannot show it again.
Keep keys on your server. Never put a key in a mobile app, a web page or a public repository. If a key leaks, revoke it in the dashboard at once.
Rotating a key
“Rotate” makes a new key with the same name and keeps the old one working for a grace period you choose (0 to 168 hours, 24 by default), so you can deploy the new key without downtime. “Revoke” stops a key immediately.
Auth errors
| Status | code | Meaning |
|---|---|---|
| 401 | missing_api_key | No Authorization header. |
| 401 | invalid_api_key | Unknown, revoked or expired key. |
| 403 | api_access_off / api_access_paused | API access is not on for your company (or paused by FieldNova). |
| 403 | company_inactive | Your business account is pending or suspended. |