Authentication

Use the authentication method documented for each LoudCrowd API.

Brand API

The read-only Brand API uses an API token created in your LoudCrowd account. An account owner can create one as follows:

1. Sign in to app.loudcrowd.com and open Settings → API Keys.
2. Select Create API Token.
3. Enter a descriptive name and select the scopes required by the endpoints you plan to call. Each endpoint lists its required scopes.
4. Select Create Token, then select Copy Token when the token is shown.

Send the API token unchanged in X-LC-Account-Key:

GET /api/v1/brand/ACCOUNT_ID/programs/PROGRAM_ID/orders HTTP/1.1
Host: api.loudcrowd.com
X-LC-Account-Key: YOUR_API_TOKEN

The token is shown only once. Store it securely. Afterwards, LoudCrowd displays only a masked value. Deleting the token revokes it.

Attribution Events API

The Attribution Events API uses an API token to sign each request with HMAC-SHA256. The token must include the Write orders scope.

See Submit Order Event for the required headers, signing instructions, and payload.

Protect credentials

Keep API tokens in a secret manager. Never expose them in client-side code, URLs, logs, screenshots, or source control. If a token is exposed, delete it in LoudCrowd and create a replacement.