Authentication

All requests need a bearer token created in the dashboard:

Authorization: Bearer lv_live_xxxxxxxxxxxxxxxx

- Keys are stored as SHA-256 hashes — we never store the plaintext secret.

- The full secret is shown **once** at creation. Copy it immediately.

- Revoke any key from the dashboard or `DELETE /v1/api-keys/{id}`.

- Every request is auditable: tenant → key → operation.

### Errors

| Code | Meaning |

|---|---|

| 401 | Missing/invalid key |

| 403 | Key revoked or tenant suspended |

| 404 | Resource not found (or belongs to another tenant) |

| 400 | Validation error — see `error` field |

| 429 | Rate limited |