API

Authentication

Every request is authenticated with a bearer token.

The Ticketero API uses bearer tokens. You send the token in the Authorization header on every request:

Authorization: Bearer YOUR_API_TOKEN

Getting a token

Tokens are issued by Ticketero, not generated self-serve:

  1. Choose a plan and sign up at ticketero.com/plans/api.
  2. Ticketero reviews and approves your account.
  3. Once approved, Ticketero issues your bearer token for production and sandbox.

Your token looks like this:

Authorization: Bearer 123|aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789EXAMPLE

No account yet? Choose a plan and sign up to request access. Approval is required before a token is issued.

Using the token

Add the token to the Authorization header on every authenticated endpoint:

curl https://production.ticketero.co/api/v4/user \
  -H "Authorization: Bearer 123|aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789EXAMPLE"

A missing or invalid token returns 401:

{ "message": "Unauthenticated." }

Keep tokens secret

  • Never embed a token in client-side code, mobile bundles or public repos.
  • Call the API from your server, and proxy requests to the browser.
  • If a token leaks, contact Ticketero to rotate it.
  • Use the sandbox token for development and tests.

Try it

Open the Buyer API Reference, paste your token into the Authorize field at the top, then run any endpoint live.