---
title: Authentication
description: Send the account key from Integrations on every request.
---

Send the account `cm_` key from Integrations in the `X-CM-API-KEY` header.

A missing or unknown key is `401`. A key that cannot send leads is `403`.

```http
X-CM-API-KEY: cm_your_key
```

The key is the account's. It can list that account's Preferred Partners, send a lead on an agreement the account holds, and read leads in that account's Leads Sent scope.