> ## Documentation Index
> Fetch the complete documentation index at: https://developer.hanto.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate Hanto API requests with workspace bearer keys.

Hanto API requests use bearer authentication. Send your API key in the `Authorization` header.

```http theme={null}
Authorization: Bearer sk_live_REPLACE_WITH_YOUR_KEY
```

## Create a key

Create API keys inside the Hanto app from **API keys**.

When a key is created, Hanto shows the plaintext value once. Copy it into your secret manager before leaving the page. After that, the app shows only a masked key identifier.

## Revoke a key

Revoke a key from **API keys** when it is no longer needed or may have been exposed.

Requests using a revoked key return:

```json theme={null}
{
  "error": "unauthorized"
}
```

## Request format

Use the key with every public API request:

```bash theme={null}
curl https://api.hanto.ai/api/v1/person/enrich \
  -H "Authorization: Bearer sk_live_REPLACE_WITH_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email":"person@gmail.com"}'
```

<Warning>
  Store API keys as secrets. Do not commit them, paste them into client-side code, or expose them in logs.
</Warning>