Skip to main content
All Developer API endpoints require authentication via an API key passed as a request header, except for GET /openapi and GET /postman, which are publicly accessible.

​
API key header

Include your API key in every request using the donate-api-key header: 
curl https://www.donate.gg/api/v1/charities \
  -H "donate-api-key: YOUR_API_KEY"
Never expose your API key in client-side code, public repositories, or anywhere it could be accessed by others. All API requests should be made server-side.

​
Error responses

If authentication fails, the API returns one of the following errors:
StatusCodeDescription
400MISSING_API_KEYThe donate-api-key header was not included in the request
403INVALID_API_KEYThe provided API key does not match any developer account
Example error response: 
{
  "error": "Missing API Key",
  "code": "MISSING_API_KEY"
}

​
Public endpoints

The following endpoints do not require the donate-api-key header:
EndpointDescription
GET /openapiOpenAPI 3.0.0 JSON spec
GET /postmanPostman collection (from OpenAPI)

​
Keeping your key secure

  • Store your API key in environment variables, never hardcoded
  • Do not commit it to version control
  • If your key is compromised, contact us at support@donate.gg to have it rotated

Don't have an API key yet?

Apply for API access