> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mag3nt.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate with the mag3nt API using API keys.

## API Keys

All API requests are authenticated with an API key. Generate one from the [mag3nt dashboard](https://mag3nt.com), then include it in every request:

```http theme={null}
Authorization: Bearer mag3nt_live_your_api_key_here
```

## Using with the SDK

<CodeGroup>
  ```typescript TypeScript theme={null}
  import { Mag3nt } from "@mag3nt/sdk";

  const mag3nt = new Mag3nt({
    serverURL: "https://mag3nt.com",
    security: {
      bearerAuth: process.env.MAG3NT_API_KEY,
    },
  });
  ```

  ```python Python theme={null}
  import mag3nt
  from mag3nt.models.components import Security
  import os

  sdk = mag3nt.Mag3nt(
      server_url="https://mag3nt.com",
      security=Security(bearer_auth=os.environ["MAG3NT_API_KEY"]),
  )
  ```
</CodeGroup>

## Managing keys

```typescript theme={null}
// Generate a new key
const key = await mag3nt.keys.keysCreate();
console.log(key.apiKey);
// ⚠️ Store securely:shown only once

// List active keys
const keys = await mag3nt.keys.keysList();

// Revoke a compromised key
await mag3nt.keys.keysRevoke(keyHash);

// Validate a key is working
const check = await mag3nt.keys.keysValidate();
console.log(check.valid); // true
```

## Best practices

<Warning>
  **Never expose API keys in client-side code.** API keys grant full access to your treasury. Use them only in server-side code or secure agent environments.
</Warning>

* **Use environment variables**:never hardcode keys in source
* **One key per agent**:if an agent is compromised, revoke only its key
* **Rotate regularly**:generate new keys and revoke old ones

## Public endpoints

These endpoints require no authentication:

| Endpoint            | Description                          |
| ------------------- | ------------------------------------ |
| `statusGet`         | Platform health                      |
| `statusGetConfig`   | Treasury addresses and configuration |
| `fundingListTokens` | Supported tokens per network         |
| `payLinksGet`       | Public pay link details              |
| `payLinksResolve`   | Resolve pay link for payment         |
| `payLinksPrepare`   | Prepare payment for a pay link       |
| `payLinksSettle`    | Submit on-chain payment proof        |