Authentication
Authenticate to the Taiga Partner API with an API key.
The Partner API authenticates with API keys. You create an API key in the Taiga developer portal and send it as a Bearer token on every request. There is no token-exchange step.
Create an API key
Open the developer portal at https://app.taigabilling.com/developers.
Select Add API key, name it, and copy the generated key.
Store the key in your secret manager.
The API key is shown once.
Taiga cannot show the key again after creation. If it is lost or exposed, revoke it from the developer portal and create a new one. Revocation takes effect immediately.
API keys are scoped to your Taiga organization. Every request made with a key is limited to that organization's configured billing-provider NPIs. You do not pass an organization override in API requests.
Use the API key
Include the key in the Authorization header on every request:
curl "https://api.taigabilling.com/api/encounters/v4?limit=10" \
-H "Authorization: Bearer $TAIGA_API_KEY"Authentication failures
Authentication fails closed. A request can fail if:
| Failure | Action |
|---|---|
| API key is missing or malformed | Send a valid key as a Bearer token |
| API key has been revoked | Create a new key |
| API key has expired | Create a new key |
| Organization lost developer access | Contact Taiga support |
Never log API keys.
Store API keys in a secret manager and rotate them if exposed. Audit logs only reference key IDs, never the key value itself.