Authentication

The canonical OpenAPI document defines HTTP Bearer authentication for the public API. Send the raw key after the Bearer scheme in the Authorization header. Key formats documented by the contract are rn_test_<64hex> and rn_live_<64hex>; never place a real key in a URL, browser bundle, prompt, log, or repository.

The gateway CLI reads FETCHER_API_KEY and constructs this header for requests. Other clients should use their secret-store equivalent and follow the same HTTP header contract.

See Quickstart for a request that fails closed when the environment variable is absent.