Authentication

The Oratora REST API is authenticated with an account API key. A key belongs to exactly one organization and can act only on that account.

Create a key

Open Dashboard → Settings → API keys (app.oratora.live/dashboard/settings/api-keys).
Click Create key, give it a name, and copy the secret.

The secret is shown once. Oratora stores only a hash — if you lose it, revoke the key and create a new one.

API access is included on qualifying plans. If your plan doesn't include it, the dashboard shows an upgrade prompt instead of minting a key.

Keys look like or_live_ followed by 48 hex characters. (Keys minted before the rebrand start with el_live_ and continue to work.)

Send the key as a Bearer token. The API base URL is https://app.oratora.live/api/v1.

curl https://app.oratora.live/api/v1/me \
  -H "Authorization: Bearer or_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

Requests are limited to 120 per 60 seconds per organization. Exceeding the limit returns 429.

Status	Meaning
`400`	Validation failed — the body includes an `issues[]` array.
`401`	Invalid or missing API key.
`403`	Your plan does not include API access.
`404`	Resource not found.
`429`	Rate limit exceeded.
`500`	Internal error.

Revoke a key any time from the same settings screen. Revocation is immediate.