API & MCP reference
API tokens & auth-first
What it does: REST and MCP-backed APIs authenticate with tokens — Bearer, X-API-Key, or OAuth.
Use it for: the auth-first rule — if the API auth fails (401/403), the connection AND any automation on top of it fail, so check auth before chasing 'connectivity'. SubnetSlinger's API checker tests exactly this (Bearer / X-API-Key / Basic).
Notes: rotate tokens; store them in the Vault, never in scripts or configs.
This page mirrors the in-app help. Open the same article any time from the app's Docs panel. Spot something unclear? Tell us.