API - Authentication

All API endpoints require Bearer token authentication, except:

• GET /v1/health
• GET /v1/metrics

Request Header

Authorization: Bearer YOUR_TOKEN_HERE

Example

curl http://localhost:7200/v1/kv/myapp/prod/DB_HOST \
  -H "Authorization: Bearer eyhQ3zLy6NdiMNwFJ-S3kS-GUA5RzI0p7ibnz-VI9jw="

Token Types

Type	Description
Root token	Generated at init; full admin access
Role-based token	Assigned a role (admin, developer, viewer, operator)
Scoped token	Legacy per-namespace read/write permissions

Check Current Token

GET /v1/auth/me

Returns the current token's identity, role, and capabilities.

Error Responses

Status	Meaning
401 Unauthorized	Missing or invalid token
403 Forbidden	Valid token but insufficient permissions

See Guide - Authentication for creating and managing tokens.