Authentication

The ERM API uses a token-based authentication scheme. Every request must include your API key in the request headers.

Getting an API Key

1. Open the ERM Dashboard and select your server
2. Navigate to Integrations → API Keys
3. Click Generate Key
4. Copy the key — you won't be able to see it again after leaving the page

Making Authenticated Requests

Include your API key as the UniqueToken header on every request:

GET https://api.ermdev.xyz/v1/guild/shifts
UniqueToken: your-api-key-here
Content-Type: application/json

Example with curl

curl https://api.ermdev.xyz/v1/guild/shifts \
  -H "UniqueToken: your-api-key-here"

Example with JavaScript (fetch)

const response = await fetch('https://api.ermdev.xyz/v1/guild/shifts', {
  headers: {
    'UniqueToken': 'your-api-key-here',
  },
});
const data = await response.json();

Example with Python (requests)

import requests

response = requests.get(
    'https://api.ermdev.xyz/v1/guild/shifts',
    headers={'UniqueToken': 'your-api-key-here'},
)
data = response.json()

Revoking a Key

If a key is compromised:

1. Go to Dashboard → Integrations → API Keys
2. Find the key and click Revoke
3. Generate a new key and update your integrations

Revoked keys are immediately invalidated.