> ## Documentation Index
> Fetch the complete documentation index at: https://docs.poelis.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate API requests in the API reference

All Poelis Public API requests must include a valid REST API key. This page is the API reference for the exact request shape; for obtaining keys and operational guidance, see [Authentication](/authentication).

## Required Header

Send your REST API key in the `Authorization` header using Bearer token format:

```
Authorization: Bearer poelis_api_YOUR_KEY_HERE
```

The key must be sent on **every** request. There is no session or cookie-based auth.

## Scoping

REST API keys are **organization-scoped**: they grant access to all workspaces, products, and items in that organization.

## Missing or Invalid Key

If the header is missing or the key is invalid/revoked, the API returns `401 Unauthorized`. See [Status Codes](/api-reference/status-codes) and [Response Format](/api-reference/response-format) for the canonical error body shape.