[{"data":1,"prerenderedAt":135},["ShallowReactive",2],{"page:\u002Fguides\u002Fauthentication":3},{"id":4,"title":5,"apiPage":6,"body":7,"description":126,"extension":127,"layout":128,"meta":129,"navigation":130,"path":131,"playground":128,"seo":132,"stem":133,"__hash__":134},"docs\u002Fguides\u002Fauthentication.md","Authentication",false,{"type":8,"value":9,"toc":119},"minimark",[10,14,24,29,37,62,88,94,98,104,108,115],[11,12,5],"h1",{"id":13},"authentication",[15,16,17,18,23],"p",{},"Every request needs an API key or, for AI apps connected through ",[19,20,22],"a",{"href":21},"\u002Fguides\u002Fmcp","MCP",", an OAuth access token.",[25,26,28],"h2",{"id":27},"api-keys","API keys",[15,30,31,32,36],{},"Send the key as a Bearer token in the ",[33,34,35],"code",{},"Authorization"," header:",[38,39,44],"pre",{"className":40,"code":41,"language":42,"meta":43,"style":43},"language-http shiki shiki-themes ayu-light ayu-light ayu-dark","Authorization: Bearer YOUR_API_KEY\n","http","",[33,45,46],{"__ignoreMap":43},[47,48,51,54,58],"span",{"class":49,"line":50},"line",1,[47,52,35],{"class":53},"soLcz",[47,55,57],{"class":56},"sfQum",":",[47,59,61],{"class":60},"sHwJV"," Bearer YOUR_API_KEY\n",[63,64,65,74,77,80],"ul",{},[66,67,68,69,73],"li",{},"Create, rotate, and delete keys in the ",[19,70,72],{"href":71},"\u002Fconsole","Console",".",[66,75,76],{},"Workspace owners, managers, and members can create keys.",[66,78,79],{},"Each key belongs to one workspace and reaches only that workspace.",[66,81,82,83,87],{},"A key acts with your own roles, limited to the ",[19,84,86],{"href":85},"\u002Fguides\u002Fpermissions#scopes","scopes"," you give it.",[89,90,91],"warning",{},[15,92,93],{},"Keep your keys secret. If a key leaks, rotate or delete it right away.",[25,95,97],{"id":96},"oauth-access-token","OAuth access tokens",[15,99,100,101,103],{},"When you connect an AI app through ",[19,102,22],{"href":21},", the app receives an OAuth access token instead of an API key.\nThe token works like an API key: it belongs to the workspace you chose and carries the scopes you approved.\nThe app sends and renews the token for you.",[25,105,107],{"id":106},"check-a-credential","Check a credential",[15,109,110,114],{},[19,111,113],{"href":112},"\u002Fapi-references\u002Fauth\u002Fping","Ping"," returns the workspace and scopes of the API key or OAuth access token you send.",[116,117,118],"style",{},"html pre.shiki code .soLcz, html code.shiki .soLcz{--shiki-light:#55B4D4;--shiki-default:#55B4D4;--shiki-dark:#39BAE6}html pre.shiki code .sfQum, html code.shiki .sfQum{--shiki-light:#FA8532;--shiki-default:#FA8532;--shiki-dark:#FF8F40}html pre.shiki code .sHwJV, html code.shiki .sHwJV{--shiki-light:#86B300;--shiki-default:#86B300;--shiki-dark:#AAD94C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":43,"searchDepth":120,"depth":120,"links":121},4,[122,124,125],{"id":27,"depth":123,"text":28},2,{"id":96,"depth":123,"text":97},{"id":106,"depth":123,"text":107},"Every request needs an API key or, for AI apps connected through MCP, an OAuth access token.","md",null,{},true,"\u002Fguides\u002Fauthentication",{"title":5,"description":126},"guides\u002Fauthentication","n1RXIY8ku1jZoeyPmtaDy_OnPi2sCEVGeDXbzXqiZlc",1792305905036]