> ## Documentation Index
> Fetch the complete documentation index at: https://docs.datavibe.cc/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate machine requests with workspace-scoped DataVibe API keys.

Use a workspace API key for the governance API:

```http theme={null}
Authorization: Bearer dv_live_your_key
```

Create and rotate keys in
[Security → API keys](https://app.datavibe.cc/security/api-keys). Store the
secret in your platform's secret manager, never in source code or workflow text
fields.

## Credential boundaries

* Dashboard users authenticate through the DataVibe sign-in flow.
* API clients use workspace-scoped `dv_live_` or `dv_test_` keys.
* SCIM uses a separate enterprise provisioning token.
* DataVibe does not need your OpenAI, Anthropic, or model-router key when you
  submit already-generated output to the gate.

<Warning>
  The complete API key is shown only when it is created. Revoke and replace a key
  that may have been exposed.
</Warning>

Invalid, expired, or revoked credentials are rejected before policy evaluation
and are not counted as governed checks.