Keys And Credentials

user access tokens are Bearer tokens issued by your auth provider
API keys are Bearer tokens used on routes that allow api_key_or_access_token
the shipped presets are runtime_default, runtime_execution, and authoring_ci
runtime_default is for setup verification plus stable agent/run reads
runtime_execution is for trusted backend public skill execution, generated-image jobs, and run inspection
authoring_ci is expiry-required for stateless CI/apply authoring flows
key issuance and rotation flows exist in setup/admin surfaces, but the underlying management routes are outside the current public route docs boundary

Never log raw tokens. Rotate on compromise.

See also