> ## Documentation Index
> Fetch the complete documentation index at: https://docs.inspack.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate against the Inspack API.

All public endpoints under `/api/v1` require a bearer token.

```http theme={null}
Authorization: Bearer <YOUR_INSPACK_API_KEY>
```

## Generating a key

1. Open [app.inspack.com](https://app.inspack.com) and sign in.
2. Go to **Settings → Integration → API keys**.
3. Click **Add API key**, then copy the new key from the list.

The list shows every active key in your organization. If a key is exposed, delete it and add a new one.

## Scopes

API keys are scoped to your organization. They can read and run checks you have access to in the portal.

## Rotating keys

Treat keys like passwords. Rotate them when:

* A team member with access leaves.
* A key may have been exposed (committed to a repo, logged in plaintext, shared in chat).
* You haven't rotated in 90 days.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.