Authentication

Every request needs an API key in the Authorization header:

curl -s "https://api.ammdistro.com/api/v2/external/delivery/accounts" \
  -H "Authorization: Bearer $AMMD_API_KEY"

Keys start with ammd_ing_, followed by 43 characters. Only the first few characters are shown in AMM Distro after the key is created.

Access levels

Access	Scopes	Can do
Send releases	`delivery:read`, `delivery:write`	Everything: create, update, upload, validate, submit, read.
Read only	`delivery:read`	List and read releases and transfers, validate, read reference data.

A read-only key that tries to change something gets 403 insufficient_scope.

Status	`error`	Meaning
401	`missing_api_key`	No `Authorization: Bearer` header.
401	`invalid_api_key`	The key is wrong or has been revoked.
403	`insufficient_scope`	The key doesn’t have the access this request needs.
403	`api_access_disabled`	API access is turned off for the accounts this key covers.

Your key never travels anywhere except in this header. Requests are only accepted over HTTPS.