API tokens & auth-first

What it does: REST and MCP-backed APIs authenticate with tokens — Bearer, X-API-Key, or OAuth.

Use it for: the auth-first rule — if the API auth fails (401/403), the connection AND any automation on top of it fail, so check auth before chasing 'connectivity'. SubnetSlinger's HTTP ▸ Auth check tests exactly this (vendor presets, or Bearer / X-API-Key / Basic).

Notes: rotate tokens; store them in the Vault, never in scripts or configs.

These are the Windows and Linux 1.3 guides, the same help that ships inside those apps. The Mac app carries its own in-app help; where macOS differs, see Privacy and FAQ. All docs. Spot something unclear? Tell us.