Authentication

Authentication

Autolane uses two authentication methods depending on which API you are accessing.

AV / Ride-Hail Analytics API

Analytics API requests require an API key passed in the Authorization header as a Bearer token.

Creating an API key

  1. Log in to the Autolane Portal
  2. Navigate to Organization Settings > API Keys
  3. Click Create API Key
  4. Enter a name for your key (e.g., “Analytics Integration”)
  5. Select the analytics:read permission
  6. Click Create and copy the key — it is only shown once

Using your API key

$curl -H "Authorization: Bearer YOUR_API_KEY" \
> "https://api.goautolane.com/api/analytics/metrics?siteId=YOUR_SITE_ID&period=today"

Finding your Site ID

Your Site ID is a UUID visible in the Autolane Portal URL when viewing a site:

https://portal.goautolane.com/sites/87654321-4321-4321-4321-210987654321
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
This is your Site ID

Direct Delivery API

Direct Delivery API requests require an Autolane API key in the Authorization header plus a per-site x-retailer-id header (UUID). Your organization is resolved from the API key; the retailer/site is resolved from the header.

Creating an API key

  1. Log in to the Autolane Portal
  2. Navigate to Organization Settings > API Keys
  3. Click Create API Key
  4. Enter a name for your key (e.g., “Delivery Integration”)
  5. Select the permissions your integration needs:
PermissionGrants
deliveries:readList and view deliveries
deliveries:writeRequest quotes, create deliveries, and update or cancel them. Required for any DSP-aggregator integration that books deliveries.
webhooks:manageRegister, update, and delete webhook endpoints
  1. Click Create and copy the key — it is only shown once

You can view and revoke Direct Delivery API keys at any time from the same API Keys page.

Using your API key

$curl -H "Authorization: Bearer YOUR_API_KEY" \
> -H "x-retailer-id: a1b2c3d4-e5f6-7890-1234-567890abcdef" \
> "https://api.goautolane.com/dd/v1/deliveries"

The x-retailer-id value is your store’s site UUID, available in the Autolane Portal under your store’s settings.

Rate limits

API key requests share the same per-organization rate limit as dashboard requests. If you receive a 429 response, wait before retrying. Rate limit details are included in response headers.

Key management

You can view and revoke API keys at any time from the API Keys page in your organization settings. Revoked keys immediately stop working.