← Back to Docs

Headers & Authentication

Learn how to add custom headers and authentication to your scheduled webhooks.

Adding Headers

When creating a webhook, add headers one at a time:

  1. Enter header name (e.g., Authorization)
  2. Enter header value (e.g., Bearer your-token)
  3. Click Add
  4. Repeat for additional headers

Common Authentication Patterns

Bearer Token

Authorization: Bearer eyJhbGciOiJIUzI1NiIs...

API Key

X-API-Key: your-api-key-here

Basic Auth

Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

The value is base64(username:password)

Content Type

RunLater automatically sets Content-Type based on your selection:

  • application/json (default)
  • application/x-www-form-urlencoded
  • text/plain
  • text/xml

Security Best Practices

  • Use HTTPS endpoints only
  • Rotate API keys regularly
  • Use the minimum required permissions
  • Don't share webhook URLs publicly

Debugging Auth Issues

If you're getting 401/403 errors:

  • Check the header name spelling (case-sensitive)
  • Verify the token hasn't expired
  • Ensure no extra spaces in values
  • Check the API documentation for required format