Authentication

MailerDash has two authentication methods:

API keys (server-to-server)

For your backend integrations. Send the key in the Authorization header:

Authorization: Bearer md_xxxxxxxxxxxxxxxxxxxx

Caution

The token for an API key is shown only once when you create it. After that only its hash is stored — it cannot be recovered. If you lose it, rotate the key.

JWT (dashboard)

The dashboard uses session JWTs. Each JWT user resolves to their linked API key for send operations. Do not use JWT for server-to-server integrations; use an API key.

Channels

Mark the traffic type with X-Md-Channel:

• trans — transactional (high priority, transactional transport).
• bulk — marketing / campaigns.