API Reference
Authentication
The event-tracking API authenticates with a single organization token sent as a header - no OAuth flow, no login request, no expiry.
Token Header
Every request to POST /v1/register/ must include a token header set to your organization token:
http
token: your_organization_token Content-Type: application/json
A missing or invalid token returns 401 Unauthorized.
Obtaining Your Token
Your organization token is available in the InfiniAnalytics dashboard, on the page where your organization is managed. It is the same token used by every integration - the Python SDK, the PAD/PAC templates, and n8n - so you only need to copy it once.
The token is scoped to your organization, not to a single automation. You'll pair it with an
automation_id in the request body to route each event to the right automation - see the Overview.Security
Keep your organization token secret - it grants write access to every automation in your organization. Store it as an environment variable or secret, never commit it to source control, and never expose it in client-side code.
Unlike short-lived session tokens, this token does not expire on its own. If it is ever exposed, request a new one from your organization page or from Infini support.