Admin authentication
Admin endpoints require a bearer token in the Authorization header.
Authorization: Bearer <api-key>
Scopes
admin- full accessread_only- read-only access to admin endpoints
First run bootstrap
Bootstrap keys are only honored while the API key store is empty:
export ADMIN_BOOTSTRAP_KEY=change-me
export ADMIN_BOOTSTRAP_READ_ONLY_KEY=change-me
export ADMIN_BOOTSTRAP_ENABLED=true
Disable bootstrap keys after creating persistent API keys.