> ## Documentation Index
> Fetch the complete documentation index at: https://kavenio.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

Kavenio API requests use bearer authentication.

```http theme={null}
Authorization: Bearer <token>
```

Use a Clerk session token for user-facing app flows or a Kavenio API key for
server-to-server integrations where the endpoint supports API-key access. Never
send provider OAuth tokens, refresh tokens, platform app secrets, or raw
encrypted credential values to Kavenio API endpoints.

Most `/v1` endpoints require authentication. Public OAuth callback endpoints are
documented with public security metadata in the generated OpenAPI reference.

Authentication failures return the standard error envelope:

```json theme={null}
{
  "ok": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Authentication failed."
  }
}
```