~/docs cat authentication.md
Authentication
Every request carries your key in the x-api-key header. Keep it server-side — never in client code or public repos. Rotate keys from the dashboard or via support@scam.ai.
request header
x-api-key: <YOUR_API_KEY>
Media handling and retention are covered by the privacy policy and DPA; endpoints accept a save flag to skip persisting files.