> ## Documentation Index
> Fetch the complete documentation index at: https://arden.timganiev.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> API key authentication for the Arden server.

## API key

Arden uses Bearer token authentication. Include the key in the `Authorization` header:

```bash theme={null}
Authorization: Bearer YOUR_API_KEY
```

## Getting a key

An API key is generated on first `arden-server serve`:

```bash theme={null}
cd apps/server
uv run arden-server serve
# Your API key: nBx7k2...
# Enter this in the desktop client to connect. It won't be shown again.
```

## Resetting a key

```bash theme={null}
cd apps/server
uv run arden-server serve --reset-key
```

This invalidates the old key immediately.

## Storage

The server stores only a salted SHA-256 hash of the key – the plaintext is never persisted. Desktop clients store the plaintext locally and encrypt it with OS-backed storage when supported.

## Public endpoints

The `/health` endpoint is always public (no auth required). This allows Docker healthchecks and monitoring tools to work without credentials.