Skip to main content

Authentication & Endpoint

How to authenticate requests against the Thought Industries GraphQL API.

Endpoint

GraphQL queries and mutations are executed by sending POST requests to your learning instance:

POST https://{learning_instance}.com/helium?apiKey=YOUR_API_KEY

Replace {learning_instance} with your subdomain and YOUR_API_KEY with the API key from Settings → Security.

API Key vs. Auth Token

API Key

Identifies your learning instance. Required on every request as the apiKey query parameter.

Auth Token

Identifies an individual learner. Generated by the Login mutation. Inside Helium, tokens are managed automatically via pageContext.

Generating an Auth Token

Call the Login mutation with the learner's email and password to receive a token.

mutation {
  Login(email: "[email protected]", password: "****") {
    token
    user {
      id
      firstName
      lastName
    }
  }
}