> ## Documentation Index
> Fetch the complete documentation index at: https://docs.watahub.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate without exposing your account API key.

Send your API key using either header:

```http theme={null}
Authorization: Bearer YOUR_API_KEY
```

```http theme={null}
X-API-Key: YOUR_API_KEY
```

These are alternatives. The key identifies your tenant. Phone numbers, WABAs and media must also belong to that tenant.

Keep keys in your backend or secret manager, not public frontend code, URLs or logs. Watahub API keys and Meta access tokens are different credentials: the gateway holds Meta tokens for connected lines.

`GET /health` is public. Missing or invalid keys on protected routes return `401`; missing or unowned resources can return `404`. See [errors](https://docs.watahub.dev/en/errors.md) for other failures.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.