Aha! REST API

In your Aha! account, open API keys and generate a key. The key is tied to a specific user and account, can be revoked independently, and is sent as Authorization: Bearer <API_KEY>. Aha! notes you can also create a dedicated Aha! user to act like a service account and use that user's API key.

Register an app at OAuth applications. After registration, use the app's client ID, client secret, and configured redirect URL in Aha!'s OAuth 2.0 authorization flow described in the OAuth2 Authentication docs. Users must authorize the app before you can call the API with the resulting bearer access token.