> For the complete documentation index, see [llms.txt](https://padiwise.gitbook.io/padiwise/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://padiwise.gitbook.io/padiwise/getting-started/authentication.md).

# Authentication

Padiwise's core security protocol is based on OAuth 2.0, which authenticates API requests using associated API keys that can be managed directly from the dashboard.

{% hint style="danger" %}
**Secure your secret key**

Do not commit your secret token to git, or use them in client-side code.
{% endhint %}

This **secret API key** grants unrestricted access to **Padiwise's** API and authorizes all API calls. If there's any suspicion of a security breach, the secret key can be reset directly from your **Padiwise** dashboard. To access **Padiwise** endpoints, you must first obtain an **access token** by sending a request to the login endpoint using the OAuth 2.0 protocol.

<figure><img src="https://2889661065-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0gJRzdSVjiagWVWOCsuN%2Fuploads%2F6utJbJPAA4osxtV0EsOp%2FScreenshot%202025-04-08%20at%207.00.30%E2%80%AFAM.png?alt=media&amp;token=97b0fcec-6d9c-460d-aed6-920997977d51" alt=""><figcaption></figcaption></figure>

The `Authorization` header should be formatted as:

```
--header 'Accept: application/json' \
--header 'Authorization: Bearer {{ access_token }}'
```