Authentication

The REST API supports two authentication methods:

Method	Used by	How
Session cookie	The web app (browser)	Handled automatically by Better Auth
API key (Bearer token)	Programmatic / third-party access	Authorization: Bearer <key> header

For programmatic access, use an API key.

Generate an API key

1. Sign in at reallifetalenttree.com
2. Go to Dashboard → Settings → API Keys
3. Click Generate new key
4. Copy the key immediately — it is shown only once

Using an API key

Include the key in the Authorization header on every request:

curl https://api.reallifetalenttree.com/api/v1/trees \
  -H "Authorization: Bearer YOUR_API_KEY"

Scope

API keys are scoped to the authenticated user's own trees. You can read, create, update, and delete your trees, but cannot access other users' trees.

Revoking a key

In Dashboard → Settings → API Keys, click Revoke next to the key. Revoked keys stop working immediately.