Authentication

All Partners API endpoints require an API key passed in the x-api-key header.

Getting your API key

API keys are provisioned by the DonorAtlas team. Contact support@donoratlas.com or reach out to your account manager to get one.

Each API key is scoped to a single team and has access to that team’s data, lists, networks, and credit balance.

Using your API key

Include the x-api-key header in every request:

$
curl -X GET https://api.donoratlas.com/v1/partners/test \
>
  -H "x-api-key: YOUR_API_KEY"

Verifying your key

Use the GET /test endpoint to verify your API key is valid. It returns 200 OK if the key is recognized and linked to an active team.

Security best practices

• Never expose your API key in client-side code. API calls should be made from your server.
• Rotate keys if you suspect they’ve been compromised. Contact support to issue a new key.
• Store keys in environment variables or a secrets manager, not in source code.

Rate limits

The Partners API enforces the following rate limits:

If you exceed these limits, the API returns 429 Too Many Requests. Implement exponential backoff in your client.