> ## Documentation Index
> Fetch the complete documentation index at: https://docs.notifique.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# API Key scopes

> Permissions to query and change the do-not-contact list.

<Tip>
  The **API Key** is your access card: each **scope** opens a door. For suppressions, there are only two — read and write.
</Tip>

## In brief

* **`suppressions:read`** — list and query entries.
* **`suppressions:write`** — add, import, and remove.
* Write does **not require** read on the same key, but admin integrations usually use both.

General guide: [API keys](/en/guides/api-key/index). First use: [Quick Start](/en/suppressions-api/como-funciona/quick-start).

***

## How to send the key

```http theme={null}
Authorization: Bearer sk_live_xxxxx
```

Alternative: `x-api-key: sk_live_xxxxx`.

<Warning>
  **Empty** scopes on creation = **ADMIN** access (everything). In production, always restrict.
</Warning>

***

## Ready-made combinations

<CardGroup cols={2}>
  <Card title="Read only" icon="magnifying-glass">
    `suppressions:read`
  </Card>

  <Card title="Write only" icon="pen">
    `suppressions:write`
  </Card>

  <Card title="Full administration" icon="list-check">
    `suppressions:read`, `suppressions:write`
  </Card>

  <Card title="CRM + suppressions" icon="address-book">
    `contacts:read`, `suppressions:read`, `suppressions:write`
  </Card>
</CardGroup>

***

## Available scopes

<AccordionGroup>
  <Accordion title="suppressions:read">
    List suppressions (`GET /v1/suppressions`) and query by ID (`GET /v1/suppressions/{id}`).
  </Accordion>

  <Accordion title="suppressions:write">
    Add (`POST /v1/suppressions`), batch (`POST /v1/suppressions/batch/add`), remove by ID, by identity, and batch removal.
  </Accordion>
</AccordionGroup>

***

## Common errors

| HTTP / `code`          | What to do                                                 |
| ---------------------- | ---------------------------------------------------------- |
| **401** `UNAUTHORIZED` | Check `Authorization: Bearer sk_...`                       |
| **403** `FORBIDDEN`    | Add `suppressions:read` or `suppressions:write` to the key |
| **403** other          | Key without access to the workspace                        |

Full catalog: [Error responses](/en/guides/conceitos/resposta-de-erros).

***

## Next steps

* [Quick Start](/en/suppressions-api/como-funciona/quick-start)
* [Webhook events](/en/suppressions-api/como-funciona/eventos-do-webhooks)
* [Introduction](/en/suppressions-api/como-funciona/introducao)