Authentication Scheme
All programmatic requests to the Extra Scoop API must be transmitted over HTTPS and include a valid JSON Web Token (JWT) in the standardAuthorization header:
Obtaining an API Token
- Sign in to your verified newsroom account on the Newsroom Terminal.
- Navigate to Terminal Settings > Developer.
- Under API Tokens, click Generate New Token.
- Store your token securely; it is displayed only once upon creation.
Authenticated Request Example
Token Expiry and Rotation
- Session Tokens: Granted through interactive sign-in; automatically refreshed via the client SDK.
- Service Tokens: Static programmatic keys; can be revoked or rotated immediately from your Developer Dashboard if compromised.