> For the complete documentation index, see [llms.txt](https://wemx.gitbook.io/wemx-api/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wemx.gitbook.io/wemx-api/authentication.md).

# Authentication

In order to use the WemX API users must authenticate using a bearer to access the endpoints. Bearer tokens can be obtained within the Admin Area -> API Keys -> Create (on your application).

Bearer tokens can only be created and used by root administrators (users that have the admin.root permission). 

Bearer tokens can be specified inside the `Authorization` header in your request. 

| Header          | Value                        |
| --------------- | ---------------------------- |
| `Authorization` | `Bearer <your_access_token>` |

```sh
curl -H "Authorization: Bearer <your_access_token>" https://wemx.app/api/v1/users
```

Replace `<your_access_token>` with your Bearer token.

For additional security you may specify an expiration date for Api Keys and restrict them to specific IP addresses.

{% hint style="warning" %}
API Keys should not be shared with anyone or stored in places that are easily compromisable such as chats, emails and/or hardcoding them into your code.
{% endhint %}