ataca/connect docs
Dashboard

Authentication

API key authentication, dashboard OAuth login, and magic link access.

API keys

All API requests require a Bearer token in the Authorization header:

curl -H "Authorization: Bearer atc_YOUR_KEY_HERE" https://connect.ataca.io/v1/who

Key format

API keys use the format atc_ followed by 32 random bytes encoded as base64url (~47 characters total). Example:

atc_dGhpcyBpcyBhIHNhbXBsZSBrZXkgZm9yIGRvY3M

Creating keys

Keys are created in the dashboard under Settings → API Keys. Each key is scoped to your active organization. When created, the full key is shown exactly once — copy it immediately.

The dashboard stores only a SHA-256 hash and an 8-character prefix for identification. The plaintext key cannot be retrieved after creation.

Revoking keys

Click Revoke next to any key in the dashboard. Revoked keys are soft-deleted (marked with a revoked_at timestamp) and immediately stop authenticating.

Last used tracking

The dashboard shows when each key was last used. This is updated asynchronously and may lag by a few seconds.

Rate limits

Endpoint group Limit
API (/v1/*) 100 requests per IP per minute
Dashboard (/dashboard/*) 60 requests per IP per minute

When rate limited, the API returns HTTP 429 Too Many Requests. Wait and retry after the limit window resets.

Dashboard login

The dashboard supports multiple OAuth providers:

  • Google — Google Workspace or personal accounts
  • GitHub — GitHub accounts
  • Microsoft — Azure AD or personal Microsoft accounts
  • Okta — if configured by your administrator

If OAuth is not available, you can sign in via email. Enter your email address on the login page and a one-time magic link is sent. Click the link to authenticate — it expires after a single use.

Magic links require email sending to be configured on the server.

Organizations

Each user has a personal organization created automatically on first login. You can create additional organizations and invite members.

All API keys, contacts, templates, and messages are scoped to the active organization. Switch between organizations using the org switcher in the dashboard navigation bar.

See Contacts & Templates for how tenant scoping affects your data.