Authentication

API Keys

API keys are used to authenticate requests to the Engrami API. You can create API keys from your Profile page.

Using API Keys

# Include in Authorization header
curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://api.engrami.com/api/v1/agents

JWT Authentication

For user-based authentication, use JWT tokens obtained through the login endpoint:

# Login to get JWT token
curl -X POST https://api.engrami.com/api/v1/auth/login \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "username=user@example.com&password=yourpassword"

# Response
{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "token_type": "bearer"
}

Security Best Practices

• Never commit API keys to version control
• Use environment variables for sensitive credentials
• Rotate API keys regularly
• Use separate keys for development and production
• Enable IP allowlisting for production keys