Authentication

API keys

Create keys in Console → Keys.
Send Authorization: Bearer <secret>.
Keep secrets server-side only.
Sandbox and live are isolated environments when both are provisioned. Live hosts are coming online — use the base URL Vence issues for your org.

Operators use WorkOS-backed sign-in at console.vence.one.

Scopes

Keys are scoped (entities read/write, underwrite, webhooks, etc.). Prefer least privilege per service.

⌘I