Skip to documentation content
Dataset APIDocs
Back to website
FIEN

Authentication

Use bearer credentials without exposing or coupling environments.

7 min Updated 2026-08-15Docs version 1.0
In this guide
  1. 1Send a bearer key
  2. 2Separate environments
  3. 3Rotate without downtime
In this guide
  1. 1Send a bearer key
  2. 2Separate environments
  3. 3Rotate without downtime

Bearer authentication

HTTP
Authorization: Bearer dsa_live_••••••••

Every v1 operation requires the bearer credential. Missing, malformed, expired, or revoked credentials return 401 with the standard error object.

Separate every environment

EnvironmentCredential practice
Local developmentSandbox-only key in a local secret store
CIDedicated short-lived secret with minimum access
StagingSeparate sandbox or staging key
ProductionProduction-only key in a managed secret service

Rotate without downtime

  1. 1
    Create a replacement credential
  2. 2
    Deploy it without revoking the old credential
  3. 3
    Verify successful catalog and query traffic
  4. 4
    Revoke the old credential
  5. 5
    Confirm that no workload still uses it

Redact credentials by default

Was this page helpful?