Authorization header. Use the Bearer scheme:
SUPERLAUNCH_API_KEY in your shell or secret store. Do not put the secret in the command text that you share.
A key can use only its selected ad accounts and permissions. The user who created the key must still have access to each account. A revoked or expired key cannot make new requests. The key cannot call unrelated API routes or manage API keys.
For account-scoped routes, use the internal id UUID from Ad accounts as ad_account_id. This is different from the provider’s external_account_id.
API errors use a JSON error object with code and message. A missing or invalid key returns HTTP 401. An access failure returns HTTP 403. Check the response code before you retry.