# Authentication

You can authenticate with the developer API via an API key. You can generate an API key from the Discord bot or via this API.

In order to access your teams data, you'll need your team ID. This can be put into the X-TeamId header, which tells the API which team you intend to manage.

```http
X-TeamId: 01KFZQQHCAT0A7ADGH7BD3K1Z8
```

You'll then need to put your API key into the `Authorization` header, ensuring you include the `Bearer` part as well.

```http
Authorization: Bearer {api_key}
```

## Super Token

If you are self-hosting Aufority, you'll notice a super token was generated in the app startup logs. The super token allows you to manage the entirety of the app, including the data of every team.

{% hint style="danger" %}
A super token is only intended for privileged management of the app and not for external use. If a super token has been compromised, restart the app to invalidate the old one.
{% endhint %}
