Authorization header.
Bearer token authentication
Pass your token as a bearer token in theAuthorization header:
curl:
Token types
Sentry supports two types of API tokens:User auth tokens
Tokens scoped to your personal Sentry account. Use these for scripts and integrations that act on your behalf.
Internal integration tokens
Tokens scoped to an organization. Use these for server-to-server integrations and automation workflows that act on behalf of the org.
DSN authentication
DSN (Data Source Name) authentication is used exclusively for event ingestion — sending errors, transactions, and other events to Sentry from your application code via a Sentry SDK. It is distinct from the API authentication described on this page and is not used to call the REST API. Your DSN looks like this:Scopes
Tokens are granted one or more scopes that control which API operations they can perform. Always request the minimum scopes your integration needs.| Scope | Description |
|---|---|
org:read | Read organization data, members, and settings |
org:write | Modify organization settings and configuration |
org:admin | Full administrative access to the organization |
project:read | Read project data and configuration |
project:write | Create and modify projects |
project:admin | Delete projects and manage project keys |
project:releases | Create and manage releases and deploys |
team:read | Read team membership and settings |
team:write | Create and modify teams |
team:admin | Delete teams |
event:read | Read issues and events |
event:write | Update and resolve issues |
event:admin | Delete issues and events |
member:read | Read organization member data |
member:write | Invite and manage organization members |
alerts:read | Read alert rules |
alerts:write | Create and modify alert rules |
Rate limiting
The Sentry API enforces rate limits to protect service availability. Rate limit information is returned in response headers:| Header | Description |
|---|---|
X-Sentry-Rate-Limit-Limit | Maximum number of requests per window |
X-Sentry-Rate-Limit-Remaining | Requests remaining in the current window |
X-Sentry-Rate-Limit-Reset | Unix timestamp when the window resets |
X-Sentry-Rate-Limit-ConcurrentLimit | Maximum concurrent requests allowed |
X-Sentry-Rate-Limit-ConcurrentRemaining | Concurrent request slots remaining |
429 Too Many Requests response. Your client should back off and retry after the time indicated in the Retry-After header.
Authentication errors
| Status code | Meaning |
|---|---|
401 Unauthorized | No token provided or token is invalid |
403 Forbidden | Token is valid but lacks the required scope |