***

title: Authentication
slug: authentication
---------------------

For clean Markdown of any page, append .md to the page URL. For a complete documentation index, see https://docs.synthflow.ai/llms.txt. For full documentation content, see https://docs.synthflow.ai/llms-full.txt.

The Synthflow API relies on API keys for every request. You can create and manage keys in **Integrations → API Keys** as long as your [user role](/role-management) allows it.

**Keep your key secret.** Do not embed it in public repos, client-side code, or shared screenshots. Store it in an environment variable or a secrets manager and inject it at runtime.

All requests must include the key using HTTP Bearer authentication:

```bash
curl https://api.synthflow.ai/v2/assistants \ 
  -H "Authorization: Bearer $SYNTHFLOW_API_KEY"
```

<Tip>
  Rotate keys periodically and delete any that are no longer in use to reduce exposure.
</Tip>

## Generate an API key

1. Sign in to your Synthflow workspace at [synthflow.ai](https://synthflow.ai/).
2. Open **Integrations → API Keys**.
3. Click **Create new API key**, copy the value, and store it securely.
4. Use the key in your requests as shown above.