> ## Documentation Index
> Fetch the complete documentation index at: https://docs.indic8.ing/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate API requests using Workspace Secret Keys.

All requests to the Indic8 REST and WebSocket APIs must include a valid Workspace API key passed via the standard `Authorization` header.

## API Key Format

API keys are issued with environment prefixes:

* `ind_live_...`: Production environment keys with live financial ledgers.
* `ind_test_...`: Sandbox environment keys for testing webhooks and integration mocks.

***

## Authorization Header

```http theme={null}
Authorization: Bearer ind_live_a1b2c3d4e5f6g7h8i9j0
```

### Example Request

```bash theme={null}
curl -X GET https://api.indic8.ing/v1/metrics/mrr \
  -H "Authorization: Bearer ind_live_a1b2c3d4e5f6g7h8i9j0"
```

***

## Creating & Rotating API Keys

1. Navigate to **Settings > API Keys** in your Indic8 dashboard.
2. Click **Create API Key**.
3. Select the key's environment (`Production` or `Test`) and scope (`Read-only` or `Full Ingress`).
4. Copy the secret key immediately. Indic8 will only display the unmasked key once.

<Warning>
  Never commit your `ind_live_` secret keys into client-side code repositories or public frontend bundles.
</Warning>