> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ipster.nl/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> API authentication and authorization methods

## TODO: Authentication Method

<Note>
  **Team Input Needed**: We need to document the actual authentication method used by api.ipster.com
</Note>

**Questions for the team:**

1. Do we use Bearer tokens? JWT? API keys? Supabase auth?
2. Where do developers get their tokens/keys?
3. How do tokens expire and refresh?
4. What's the token format and where to include it in requests?

## TODO: Permission Levels

**Questions for the team:**

1. What are the different permission levels? (Admin, User, Client, etc.)
2. Which endpoints require which permissions?
3. How do we handle organization-level permissions?
4. Do we have role-based access control (RBAC)?

## TODO: Example Request

Once we know the auth method, we'll add examples like:

```javascript theme={null}
// TODO: Replace with actual auth method
const response = await fetch('https://api.ipster.com/v1/agents', {
  headers: {
    'Authorization': 'Bearer YOUR_TOKEN_HERE', // TODO: Confirm format
    'Content-Type': 'application/json'
  }
});
```

## TODO: Error Responses

**Questions for the team:**

1. What error codes do we return for auth failures? (401, 403, etc.)
2. What's the error response format?
3. Do we have specific error messages for different auth scenarios?

## TODO: Security Best Practices

**Questions for the team:**

1. Any rate limiting on authentication endpoints?
2. Token storage recommendations for frontend?
3. CORS configuration details?
4. Any IP restrictions or other security measures?