Authentication

The Synthesis API uses three authentication methods depending on the type of request.

Project API key

Backend account management via X-PROJECT-API-KEY header. Create accounts, sessions, and API keys.

Frontend user auth via Authorization: Bearer header. Short-lived, refreshable tokens.

Backend user operations via X-API-KEY header. Long-lived, revocable keys.

Auth Method	Header	Use Case	Routes
Project API Key	`X-PROJECT-API-KEY`	Backend account management	`/api/v1/project/*`
Session Token	`Authorization: Bearer ...`	Frontend user authentication	`/api/v1/account/`, `/api/v1/wallet/`
Account API Key	`X-API-KEY`	Backend user operations	`/api/v1/account/`, `/api/v1/wallet/`