> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bedrock.cv/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate requests to the Bedrock API.

All API requests require an API key. Pass it as a Bearer token in the `Authorization` header:

```bash theme={null}
curl https://api.bedrock.cv/projects \
  -H "Authorization: Bearer sk_xxx"
```

You can also use the `X-API-Key` header as an alternative:

```bash theme={null}
curl https://api.bedrock.cv/projects \
  -H "X-API-Key: sk_xxx"
```

## Creating Keys

1. Go to [**Settings > Organization > API > Keys**](https://bedrock.cv/organization/api/keys) in the dashboard
2. Click **Create Key**
3. Copy the key immediately — it won't be shown again

## Key Permissions

Keys inherit the permissions of the user who created them. A key can only access resources within its organization.

Vision API endpoints require access to the underlying resources. Your API key must have permission to read the drawings, sheets, or blocks being processed.

## Security

* Store keys in environment variables, not source code
* Rotate keys periodically
* Revoke keys immediately if compromised

```bash theme={null}
# Good
export BEDROCK_API_KEY=sk_xxx
curl -H "Authorization: Bearer $BEDROCK_API_KEY" ...

# Bad - key in source code
curl -H "Authorization: Bearer sk_xxx" ...
```