Authentication

Dugble’s public API uses team tokens for authentication. Team tokens are scoped to a single team and carry an explicit set of permissions.

Bearer authentication

Send your team token in the Authorization header on every API request.

Authorization: Bearer dgb_team_...

For example:

curl https://api.dugble.com/emails \
  -H "Authorization: Bearer $DUGBLE_API_KEY" \
  -H "Accept: application/json"

Team token secrets use the dgb_team_ prefix. Keep them server-side and never expose them in client-side code or public repositories.

Team scope

A team token is already bound to the team that created it. You do not need to send an X-Team-ID header when authenticating with a team token.

Permissions

Each token has one or more permissions. The Email and SMS API currently uses these permissions:

Permission	Allows
`email:read`	List and retrieve email messages
`email:send`	Send, schedule, update, and cancel email messages
`sms:read`	List and retrieve SMS messages
`sms:send`	Send, schedule, update, cancel, and synchronize SMS messages

Use the smallest permission set your integration needs.

Expiration and revocation

Team tokens can expire and can be revoked. Requests made with an invalid, expired, or revoked token return 401 UNAUTHORIZED. A valid token that does not have the permission required by an endpoint returns 403 FORBIDDEN.

Example request

curl -X POST https://api.dugble.com/emails \
  -H "Authorization: Bearer $DUGBLE_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: welcome-user-42" \
  -d '{
    "from": "Dugble <notifications@example.com>",
    "to": "ada@example.com",
    "subject": "Welcome",
    "html": "<p>Welcome to Dugble.</p>"
  }'

See Idempotency for guidance on safely retrying mutation requests.

Overview

Email

SMS

Domains

Templates

Sender IDs

Contacts

Contact Properties

Topics

Segments

Suppressions

Broadcasts

Authentication

Bearer authentication

Team scope

Permissions

Expiration and revocation

Example request

​Bearer authentication

​Team scope

​Permissions

​Expiration and revocation

​Example request

Bearer authentication

Team scope

Permissions

Expiration and revocation

Example request