Exchanging an API access key for a bearer auth token for use with the Flatfile GraphQL API

API Access Keys are long lived and do not expire unless manually deactivated in the dashboard. Therefore, it is good form to exchange them for short lived Auth Tokens which have a configurable expiration time. You can learn how to exchange an API Access Key ID and API Access Key Secret for an Auth Token using our REST API here.

Use the resulting Auth token as a HTTP header when sending the GraphQL mutation request:

`Authorization: Bearer <auth token>`