Skip to main content

Authentication

Every request to the Stealthium REST API is authenticated with a bearer token in the Authorization header:

curl "https://api.stealthium.online/api/v1/alerts/" \
  -H "Authorization: Bearer <YOUR-JWT>"

Getting a token​

Sign in with GitHub or Google as described in Creating an API Key. After login you are redirected to your frontend_url with a ?token=<JWT> query parameter — that JWT is your bearer token.

Agent API keys don't work here

sk-… API keys authenticate Hyperion agents, not the REST API. Requests to the endpoints in this section must use the JWT from the OAuth login flow.

Tokens expire. If a previously working token starts returning 401, sign in again to get a fresh one.

Authentication errors​

A missing, expired, or invalid token returns 401 Unauthorized:

{
  "error": "unauthorized",
  "message": "missing or invalid bearer token"
}