> ## Documentation Index
> Fetch the complete documentation index at: https://api.lawtte.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How Lawtte authenticates API requests and connector sessions.

Every endpoint requires credentials. There is no public, unauthenticated surface.

## API keys

Pass your key as a bearer token on every request:

```bash theme={null}
curl https://www.lawtte.ai/api/v2/list-agents \
  -H "Authorization: Bearer $LAWTTE_API_KEY"
```

<CardGroup cols={2}>
  <Card title="Server-side only" icon="lock">
    A key can place calls and read client data. Keep it in environment variables
    or a secret manager, never in frontend code.
  </Card>

  <Card title="Scoped to your firm" icon="building">
    Keys resolve to one firm. Requests that name another firm's `firmSlug` are rejected.
  </Card>
</CardGroup>

## Dashboard sessions

Requests from the Lawtte dashboard are authenticated by the signed-in session
cookie instead of a key, which is why the same endpoints power both. Session
requests are additionally checked against the signed-in user's role and firm.

## The Claude connector

The Lawtte connector for Claude does not use API keys. It uses OAuth: Claude
redirects you to Lawtte, you sign in, pick one Studio calling agent, and approve
the call tools. Access can be revoked at any time from
**Dashboard → Connect**. See [connect Claude](/mcp/connect-claude).

## Rotating and revoking

<Steps>
  <Step title="Rotate a key">
    Email [contact@lawtte.ai](mailto:contact@lawtte.ai) to have a new key issued and the old
    one retired. Keys are stored only as hashes, so a lost key cannot be recovered — it has to be replaced.
  </Step>

  <Step title="Revoke a connector">
    Open **Dashboard → Connect**, find the app under connected apps, and choose
    **Disconnect**. Access ends immediately.
  </Step>
</Steps>


## Related topics

- [Troubleshooting](/mcp/troubleshooting.md)
- [How to build an AI receptionist and intake system](/guides/build-an-ai-receptionist.md)