# Authentication

Use a signed-in Foxora account access token as a Bearer token over HTTPS, test `/v1/me`, and sign out or revoke the session after suspected exposure.

## Where this lives

Use a trusted local or server-side API client.

The Foxora API provides OpenAI-compatible chat completions plus account, usage, and public model-discovery endpoints. Authenticated routes currently accept a signed-in Foxora account access token.

> **Safety:** Treat the complete account access token as a secret. Do not paste it into prompts, commit it to a repository, expose it in client-side bundles, or include it in logs, screenshots, and support messages.

## Steps

1. Use a trusted local or server-side API client.
2. Use a signed-in Foxora account access token as a Bearer token over HTTPS.
3. Test `/v1/me`, and sign out or revoke the session after suspected exposure.
4. **Confirm the result.** Inspect HTTP status, response headers, request identifiers, usage fields, and the parsed response; cross-check account or usage endpoints after a small request.

## Choose the right path

- Use `/v1/chat/completions` for OpenAI-compatible generation.
- Use `/v1/me` and `/v1/me/usage` for account and usage state.
- Use `/v1/models` to discover model identifiers instead of hardcoding assumptions.

## Authentication header

Store the signed-in account access token outside source code and send it as a Bearer token:

```bash
curl https://api.foxora.ai/v1/me \
  -H "Authorization: Bearer $FOXORA_ACCESS_TOKEN"
```

> **Developer API status:** Self-service long-lived user API keys are not exposed in Foxora v5.0.3. Do not copy internal service credentials from application storage. Use a short-lived account access token only in a trusted server-side or local development environment.


## Confirm it worked

- Inspect HTTP status, response headers, request identifiers, usage fields, and the parsed response; cross-check account or usage endpoints after a small request.
- The screen, command, file, run, or destination named in this guide reflects the expected state.