Authentication

The key rides in the URL path — no headers to set, which is exactly what lets GIS tools consume these URLs directly.

Keep the URL secret. Anyone holding it can read your project's field data until the key is revoked.
Scope is enforced server-side. A key minted for site 8 answers only for site 8 — any other scope returns 403.
Keys are revocable. A revoked key returns 403 immediately.

Verify your key

Call your bare base URL. A 200 with your scope label means you're pointed right; 403 means the key is wrong, revoked, or scoped elsewhere — see Errors.

curl "https://app.fiberconstructioncompany.com/api/field/v1/geoexport/fck_YOURKEY/site/8"

const res = await fetch(
  "https://app.fiberconstructioncompany.com/api/field/v1/geoexport/fck_YOURKEY/site/8");
const data = await res.json();

<?php
$data = json_decode(
  file_get_contents("https://app.fiberconstructioncompany.com/api/field/v1/geoexport/fck_YOURKEY/site/8"),
  true);

import requests
data = requests.get(
  "https://app.fiberconstructioncompany.com/api/field/v1/geoexport/fck_YOURKEY/site/8",
  timeout=30).json()

200 application/json

{
  "api": "fcc-field-geo",
  "version": 1,
  "crs": "EPSG:4326",
  "scope": {
    "kind": "site",
    "id": 8,
    "label": "Site-Qa-01 Old Settlers"
  },
  "layers": { … }
}