Authentication - Arct Cloud

Send an API token in the Authorization header. Only GET /openapi.json works without one.

curl https://api.arct.cloud/v1/account \
  -H "Authorization: Bearer $ARCT_TOKEN"

Create a Token

Create one in Settings > API Tokens (steps). The secret is shown once.
Expiry: Never, 30 days, 90 days or 1 year.
The account owner gets an email for each new token, without the secret.
The API can’t manage tokens.

Token Format

arct_ plus letters, digits, - and _, up to 100 characters; the dashboard shows the first 12.

Access Levels

Scope	Dashboard label	Allows
`read`	Read only	Every `GET` endpoint.
`read_write`	Read & write	Every endpoint, including charges and deletes.

Keep tokens server-side; use read tokens for read-only jobs.

Auth Errors

401: the token can’t be used. 403: the token is valid but the request isn’t allowed.

HTTP	Code	Cause
`401`	`invalid_token`	Missing, malformed, unknown or deleted.
`401`	`token_disabled`	Disabled; works again once re-enabled.
`401`	`token_expired`	Expired.
`403`	`account_disabled`	Account disabled.
`403`	`api_access_disabled`	API not enabled for your account; contact support.
`403`	`insufficient_scope`	`read` token on a write endpoint.
`429`	`rate_limit_exceeded`	Too many failed attempts.

Rotate a Token

Create a new token and switch to it. When the old token’s Last used stops changing (it updates at most once a minute), disable it, then delete it.