Build support workflows on a stable, tenant-scoped API.

Create an API key in Settings / Developer platform and give it only the scopes your integration needs.

import { Kevrow } from "@kevrow/sdk";

const kevrow = new Kevrow({ apiKey: process.env.KEVROW_API_KEY! });
const open = await kevrow.tickets.list({ status: "open" });
console.log(open.meta.total);

Send a bearer token in the Authorization header. API keys may expire and can be revoked instantly. OAuth client-credentials tokens expire after one hour.

curl https://kevrow.com/api/v1/api/tickets \
  -H "Authorization: Bearer kr_live_..."

Compute HMAC-SHA256 over the timestamp, a period, and the unmodified request body. Compare it to the v1 value in X-Kevrow-Signature and reject old timestamps.

const expected = hmac(secret, timestamp + "." + rawBody);
secureCompare("v1=" + expected, signature);