Authentication

All API requests require a valid API key sent as a Bearer token in the Authorization header.

Getting your API key

API keys use the prefix ctgo_ so you can identify them in your configuration.

Include your key in the Authorization header of every request:

curl https://www.catchthegoodones.com/api/v2/leads \
  -H "Authorization: Bearer ctgo_your_api_key_here"

You can manage your API key from the API Key page:

Regenerate - Creates a new key and immediately invalidates the old one
Revoke - Permanently disables the key. You can generate a new one at any time.

If your key is missing, malformed, or revoked, the API returns a 401 status:

{
  "error": "Missing or invalid Authorization header. Use: Bearer <api_key>"
}

{
  "error": "Invalid API key format."
}

{
  "error": "Invalid or revoked API key."
}