Skip to main content

Admin authentication

Admin endpoints require a bearer token in the Authorization header.

Authorization: Bearer <api-key>

Scopes

  • admin - full access
  • read_only - read-only access to admin endpoints

First run bootstrap

Bootstrap keys are only honored while the API key store is empty:

export ADMIN_BOOTSTRAP_KEY=change-me
export ADMIN_BOOTSTRAP_READ_ONLY_KEY=change-me
export ADMIN_BOOTSTRAP_ENABLED=true

Disable bootstrap keys after creating persistent API keys.