Add your sender domain
Partner key only. Registers the domain (for example post.yourcompany.no; email then goes from noreply@ that host once it is VERIFIED) and returns 201 with the DNS records. Needs white label and a key created by an owner or administrator. At most 10 changes per hour per partner, shared with LettBestilt Partner. Remove the old domain first to switch.
Authentication
The partner key (lbp_test_… or lbp_live_…), sent as Authorization: Bearer lbp_… and created in LettBestilt Partner under Partner key. It belongs to the whole partner, not to a restaurant, and only works against /api/v1/partner. Server to server only: a request with an Origin header is rejected with 403 FORBIDDEN, and the key must never be in a browser. A TEST key sees and creates only sandboxes; LIVE keys work once LettBestilt Partner is open. A suspended or archived partner, a revoked key and a restaurant key (lbs_…) here give 401 UNAUTHORIZED; an expired key gives 401 KEY_EXPIRED.