# Authentication

In order to use the WemX API users must authenticate using a bearer to access the endpoints. Bearer tokens can be obtained within the Admin Area -> API Keys -> Create (on your application).

Bearer tokens can only be created and used by root administrators (users that have the admin.root permission).&#x20;

Bearer tokens can be specified inside the `Authorization` header in your request.&#x20;

| Header          | Value                        |
| --------------- | ---------------------------- |
| `Authorization` | `Bearer <your_access_token>` |

```sh
curl -H "Authorization: Bearer <your_access_token>" https://wemx.app/api/v1/users
```

Replace `<your_access_token>` with your Bearer token.

For additional security you may specify an expiration date for Api Keys and restrict them to specific IP addresses.

{% hint style="warning" %}
API Keys should not be shared with anyone or stored in places that are easily compromisable such as chats, emails and/or hardcoding them into your code.
{% endhint %}
