API Authentication

The Ping API supports multiple authentication methods for different use cases.

Base URL

Authentication Methods

Session Token (iOS/Web)

Obtained via Sign in with Apple:

Used by the iOS app and web dashboard for user-specific operations.

API Key (Programmatic Access)

Create API keys in the app settings for server-to-server access:

API keys work with all authenticated endpoints including channels, messages, and webhook secrets.

Webhook Token (No Header Required)

The webhook endpoint (POST /v1/send/:token) uses the URL token instead of a header:

No Authorization header needed - the token in the URL is your authentication.

Account Management

Sign In with Apple

Ping uses Sign in with Apple exclusively for authentication. This provides:

• Security - No passwords to remember or steal
• Privacy - Option to hide your email address
• Convenience - Face ID/Touch ID authentication

Your Apple ID links your account across iOS and web.

Cross-Device Sync

Signing in with the same Apple ID on multiple devices syncs:

• All your channels
• Complete message history
• Channel settings

Changes made on any device appear everywhere instantly.

Deleting Your Account

You can permanently delete your account and all associated data:

curl -X DELETE 'https://ping-api-production.up.railway.app/v1/auth/user' \
  -H 'Authorization: Bearer YOUR_SESSION_TOKEN'

Response:

{
  "ok": true,
  "message": "Account and all associated data deleted"
}

Account deletion removes all your data:

Warning: This action is permanent and cannot be undone.

Related

• API Keys - Create and manage API keys
• Endpoints - Full API reference