Authorization header.
Getting your API token
Sign in via the auth endpoint:Response
otp_attempt parameter:
Using your token
Include the token in every request:401 Unauthorized.
Selecting an account
If your user belongs to multiple accounts (or has governing body access to other clubs), the API defaults to your primary account. Use theAccount-Id header to switch:
| Scenario | Response |
|---|---|
| Header omitted | Default account is used |
| Valid, accessible account | That account’s data is returned |
| Account exists but you don’t have access | 403 Forbidden |
| Account doesn’t exist | 404 Not Found |