> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cds.marmar.life/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

All `/v1/*` API requests require an API key passed in the `Authorization` header:

```http theme={null}
POST /v1/patients HTTP/1.1
Host: cds.marmar.life
Authorization: Bearer YOUR_API_KEY
Content-Type: application/json
```

## Getting Your API Key

API keys are managed through the [Tenant Dashboard](https://portal.marmar.life):

1. **Sign in** to the dashboard using your email (magic link authentication)
2. Navigate to **Settings → API Keys**
3. Click **Create New Key** and give it a descriptive name
4. Copy and store the key securely — it's only shown once

## Key Management Best Practices

* **Store securely**: Use a secrets manager like HashiCorp Vault or AWS Secrets Manager
* **Rotate regularly**: Create new keys periodically and revoke old ones
* **Use descriptive names**: Label keys by environment (e.g., "Production API", "Staging")
* **Revoke compromised keys**: If a key is exposed, delete it immediately from the dashboard

## Using the SDK

The SDK automatically handles authentication when configured with your API key:

```typescript theme={null}
import { createMarmarClient } from '@marmarteam/sdk';

const client = createMarmarClient({
  baseUrl: 'https://cds.marmar.life/v1',
  apiKey: process.env.MARMAR_API_KEY,
});

// Make authenticated requests
const patients = await client.listPatients();
```

## Rate Limits

API keys are subject to rate limiting (100 requests per minute by default).
If you exceed the limit, you'll receive a `429 Too Many Requests` response.