# API authentication

Canonical documentation: https://veripoint.ai/api-docs/authentication

## Veripoint workspace REST API and API-key MCP

Authorization: Bearer YOUR_VERIPOINT_API_KEY

Create a read or research key in the workspace, keep it secret, and observe expiry and revocation. Never send keys in a query string.

## Platform MCP

Use https://veripoint.sens663.chatgpt.site/mcp with platform-managed OAuth and an explicitly linked Veripoint workspace. Setup: https://veripoint.ai/api-docs/mcp-setup/index.md

## Separately licensed data APIs

Authorization: Token YOUR_DATA_API_KEY

Data API entitlements and limits are separate from the workspace plan. A workspace key cannot be substituted for a data API credential.