> ## Documentation Index
> Fetch the complete documentation index at: https://test-docs.upayments.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate API requests

# Authentication

## Session-Based (Browser)

When using the dashboard, authentication is handled via HTTP-only cookies set during login. No manual token management needed.

## API Key (Server-to-Server)

<Note>Available on Scale tier</Note>

For server-to-server integrations, use API keys:

```bash theme={null}
curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://app.finmi.io/api/transactions
```

Generate API keys at **Settings → API Keys**.

### Key Types

| Type            | Access                   |
| --------------- | ------------------------ |
| **Read-only**   | GET requests only        |
| **Full access** | GET, POST, PATCH, DELETE |

### Key Rotation

API keys can be revoked and regenerated at any time from the API Keys settings page. Revoking a key immediately invalidates all requests using it.