“Hey! I’m trying to trigger the POST https://api.vapi.ai/call endpoint from a backend webhook (GoHighLevel). What exact API key should I use for the Authorization: Bearer header when calling the REST API? Specifically: • Should I use a Private API Key or a Public API Key? • If a private key is required, where exactly in the dashboard is that key located now? • The docs show using a private bearer token, but my dashboard only displays Public API Keys under Client SDK — not a private one. • Can you point me to the correct location or regenerate the proper Bearer API key needed for server-side requests?”

Hi there, Thank you for your message. Our team is currently out of the office. We operate Monday through Friday, from 9:00 AM to 8:00 PM Pacific Standard Time (PST). We’ll get back to you as soon as possible during our normal business hours. If your message is urgent, please mark it accordingly or include “URGENT” in the subject line, and we’ll do our best to respond promptly. Warm regards, Vapi Customer Support Team

To authenticate your server-side POST request to the Vapi API, use the Bearer token from your Dashboard in the

Authorization

header. Here’s a concrete example:

bash
curl -X POST https://api.vapi.ai/call \
  -H "Authorization: Bearer <your_api_key>" \
  -H "Content-Type: application/json" \
  -d '{ ... }'

Retrieve your API key from the Dashboard as shown in the [documentation](https://docs.vapi.ai/api-reference/calls/call-controller-find-all-paginated). Source: - [Calls API Reference](https://docs.vapi.ai/api-reference/calls/call-controller-find-all-paginated)

my authorization key just shows "token" and does not show the actual token?

Hey, to use the POST https://api.vapi.ai/call endpoint, you should use a Private API Key for the Authorization: Bearer header. You can find the Private API Key in the API section of your dashboard. If you can’t see it there or need to regenerate it, please check the help section of your dashboard or let me know, and I can assist further.