> ## Documentation Index
> Fetch the complete documentation index at: /docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Every request carries an API key as a bearer token.

Create a key in the console under **API keys**. A key is shown once, when you create it: store it as `SPIRAL_API_KEY`
and never commit it.

Send it on every request:

```bash theme={null}
curl https://api.spiral.ai/v1/me \
  -H "Authorization: Bearer $SPIRAL_API_KEY"
```

A missing or invalid key answers `401 UNAUTHENTICATED`. The key decides the organization, its workspace, and the
key's own spend cap and rate limits. `GET /v1/me` shows what the key can do.

The MCP server takes the same keys, as the same bearer token.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.