API keys & scopes
Minting scoped credentials for the public API — the scope catalogue, why implication is resolved at grant time rather than at check time, and what a key with no scopes means.
Minting scoped credentials for the public API — the scope catalogue, why implication is resolved at grant time rather than at check time, and what a key with no scopes means.
How to authenticate against each Sumeru Systems surface — admin API (bearer tokens), public endpoints (CORS or API keys), webhooks (HMAC). Plus the full scopes catalog for the v1 admin API.