Authentication
Ally API uses Bearer Token Authentication to authorize all requests. To interact with the API, you’ll need to include your Secret API Key in the Authorization header of every request. This key should be stored safely on your backend — never expose it on the client side. Example:- Curl
- Python
- JavaScript
- Your Secret API Key grants full access — keep it secure and private.
- You can manage and regenerate your keys anytime via the Ally Developer Dashboard.
Requests
The Ally API accepts only GET requests. To ensure successful communication, all requests must meet the following requirements:- The Authorization header must include your Secret API Key as a Bearer token
- The Content-Type header must be set to application/json
Rate Limiting
Ally enforces a limit of 2 requests per second. If you exceed this rate, the API will respond with a429 Too Many Requests
error. Consider implementing retries with exponential backoff in your integration.