This topic describes the API authentication method for Imperva SaaS products.

In order to use the API, the client must be authenticated by Imperva. To authenticate, send your API ID and API key using the x-API-Id and x-API-Key request headers. For example:

x-API-Id: 12345

x-API-Key: 123**************789

For example, a curl request might look like this:

curl -X 'GET' \
  'https://api.imperva.com/policies/v2/policies' \
  -H 'accept: application/json' \
  -H 'x-API-Id: 2222' \
  -H 'x-API-Key: 33333'

To create and manage API keys with granular permissions and sub account access, see API Key Management.

The API functionality available for your use is based on the roles and permissions assigned to your user.