Authentication

API requests use bearer-token authentication.

Header

Authorization: Bearer <your-api-key>

Store keys in environment variables or a secret manager. Logs, screenshots, and support tickets must not include raw Authorization header values.