API Authentication
All API endpoints require an API key:
- Generate a key in Settings → API Keys.
- Include it in the
Authorizationheader:Authorization: Bearer <YOUR_API_KEY>. - Keys can be scoped to specific projects or agents for fine‑grained access control.
- Rotate keys regularly via the dashboard.
For server‑to‑server calls, you may also use Signed JWTs; see the advanced authentication guide in the docs.