Authentication

The HarborGuard API supports three authentication methods.

Session Cookie

Browser-based authentication using the NextAuth session cookie. Automatically set after login.

API Key

Include your API key in the X-API-Key header:

curl -H "X-API-Key: hg_your_key_here" \
  https://your-instance.harborguard.com/api/scans

Bearer Token

Use a personal access token as a Bearer token:

curl -H "Authorization: Bearer hg_your_token_here" \
  https://your-instance.harborguard.com/api/scans