> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wadial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate requests to the WADial API.

All stable API routes use the `/api/v1` prefix.

Create an API key in the dashboard, then send it as a bearer token with every API request:

```http theme={null}
Authorization: Bearer <api_key>
```

Successful responses are wrapped in a `data` object.

```json theme={null}
{
  "data": {}
}
```

## API keys

API keys are for server-side applications. Do not put them in browser code, mobile apps, or other places where users can extract them.

Use one key per app or environment. Revoke keys that are no longer used.

## Dashboard auth

Dashboard sign-in uses short-lived access tokens and refresh tokens. Customer integrations should use API keys, not dashboard tokens.
