Authentication

The Testzilla API accepts two credential types. Most integrations should use an API key.

API key (recommended)

Send your key in the x-api-key header. Keys are created in the web app under account settings, stored only as a hash on our side, and shown to you once at creation.

curl https://api.testzilla.ai/v1/projects \
  -H "x-api-key: $TESTZILLA_API_KEY"

Caution

Treat API keys like passwords. If a key leaks, revoke it in the app and create a new one.

Firebase ID token

The web app authenticates with a Firebase ID token. You can use the same on the API via the Authorization header. Tokens are short-lived, so this is mainly for first-party / browser use rather than server-to-server automation.

curl https://api.testzilla.ai/v1/projects \
  -H "Authorization: Bearer $FIREBASE_ID_TOKEN"

Environments

| Environment | Base URL | | --- | --- | | Production | https://api.testzilla.ai/v1 | | Development | https://api-dev.testzilla.ai/v1 |