> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fluidehr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Auth overview

> Developer credentials, token exchange, and access tokens for Fluide APIs.

# Auth overview

The **Auth API** issues access tokens and manages **developer API keys** for Fluide Connect integrations.

## Authorization model

| Step           | Credentials                                                                                 |
| -------------- | ------------------------------------------------------------------------------------------- |
| Token exchange | `X-Fluide-Api-Key`, `X-Fluide-Api-Secret`, `X-Fluide-Client-Id: fluide-developer`           |
| Product APIs   | `Authorization: Bearer <token>`, `X-Fluide-Api-Key`, `X-Fluide-Client-Id: fluide-developer` |

The API secret is used **only** at token exchange, not on HR, Payroll, Pay, Books, or Utils routes.

See [Authorization](/getting-started/authorization) for the full flow. For **organization vs partner tenancy**, see [Multi-tenancy](/getting-started/multi-tenancy).

## Key lifecycle

* **Provision:** API key and one-time secret after email verification in Connect
* **View:** `GET /api/v1/authorize/current` (metadata only; secret never returned)
* **Rotate:** `POST /api/v1/authorize/rotate-secret` or the Connect dashboard

<CardGroup cols={2}>
  <Card title="Auth quickstart" icon="rocket" href="/auth/quickstart">
    Exchange credentials and verify your session.
  </Card>

  <Card title="Auth API reference" icon="code" href="/api-reference/auth">
    Developer access endpoints and health checks.
  </Card>
</CardGroup>