For Pangolin Community Edition, the integration API must be enabled. Check out the documentation for how to enable the integration API.
Authentication
All API requests require authentication using a Bearer token in the Authorization header:API Key Types
Pangolin supports two types of API keys with different permission levels:Organization API Keys
Organization API keys are created by organization admins and have limited scope to perform actions only in that organization.Root API Keys
Root API keys have some extra permissions and can execute operations across orgs. They are only available in the Community Edition of Pangolin:Root API keys have elevated permissions and should be used carefully. Only create them when you need server-wide access.
Creating API Keys
1
Access the admin panel
Navigate to your admin panel:
- Organization keys: Organization → API Keys
- Root keys: Server Admin → API Keys (self-hosted only)
2
Generate a new key
Click “Create API Key” and provide a descriptive name for the key.
3
Configure permissions
Select the specific permissions your API key needs from the permissions selector.

API key permissions selector showing available operations
4
Copy and secure your key
Copy the generated API key immediately. It won’t be shown again.
Store API keys securely and never commit them to version control. Use environment variables or secure secret management.
API Documentation
View the Swagger docs here: https://api.pangolin.fossorial.io/v1/docs. Interactive API documentation is available through Swagger UI:
Swagger UI showing API endpoints and interactive testing
https://api.your-domain.com/v1/docs
.