> ## Documentation Index
> Fetch the complete documentation index at: https://docs.events.intrace.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate requests and understand tenant scope

The API uses API-key authentication.

## Header

Send your key in the `X-API-Key` header:

```bash theme={null}
X-API-Key: YOUR_API_KEY
```

## Example

```bash theme={null}
curl -H "X-API-Key: YOUR_API_KEY" "https://api.intrace.ai/v1/assets"
```

## Tenant scope

The API key determines which assets, threats, incidents, alerts, and reports you can access.

That is why external routes do **not** require internal fields such as `case_id` or `investigation_id`.

## Errors

| Code  | Meaning                                               |
| ----- | ----------------------------------------------------- |
| `401` | Missing or invalid API key                            |
| `403` | Valid API key, but scope does not allow the operation |