Authentication

Use an API Key from the console. Send it as a Bearer token:

Authorization: Bearer dg_live_...

• Keys are hashed at rest (SHA-256); plaintext is shown only once at creation.
• Optional: IP allowlist and platform scopes on each key.
• Max 20 active keys per organization.

Admin console uses a separate session cookie (admin_session) and does not share C-end Better Auth cookies.