All Drum API requests require authentication using an API token in the request headers to keep your data secure. You can easily generate and remove API keys from your Drum settings.
Drum's API Endpoint
All requests for Drum's API should be to the following API endpoint:
https://app.getdrum.com/api/v1/
The resource name can then be appended as required, e.g:
https://app.getdrum.com/api/v1/projects
View the documentation for each Drum resource to get more information about their specific URL's and the available data per endpoint.
Getting an API Token
Generate a new API token through the interface
Store your token securely
Access to the API can be given to staff via the permissions system of Drum. By default, account users with the "admin" role can access the API key page by default, but all other account users will require explicit permission via their Drum permissions.
Using the API Token For API Requests
To make requests to the Drum API from your third-party tool of choice, you must include your API token in all requests using the Authorization header:
Authorization: Bearer your-api-token-here
Example Request
curl -H "Authorization: Bearer your-api-token-here" https://app.getdrum.com/api/v1/projects
Security Notes
Keep your API token secure and never share it
Each token's last used timestamp is tracked
Tokens are associated with a specific user account
API requests are stateless (no session storage)
Invalid or missing tokens will receive a 401 Unauthorized response
The API will authenticate your requests and provide access to resources within your account's scope when using a valid token.