Authentication

API Key Authentication

API keys are unique credentials provided to each agent and user via the dashboard. These keys must be included in the Authorization header as a Bearer token for every API request.

Authorization: Bearer YOUR_API_KEY

JWT Authentication

For user-facing APIs, a JSON Web Token (JWT) is required. These tokens are issued upon successful login and are validated for expiration and permissions before granting access.

Best Practices

• Keep API keys and JWTs confidential and secure.
• Regularly rotate API keys to minimize security risks.
• Follow the principle of least privilege when assigning API access permissions.