> ## Documentation Index
> Fetch the complete documentation index at: https://docs.arct.cloud/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> API tokens, access levels and auth errors.

Send an API token in the `Authorization` header. Only `GET /openapi.json` works without one.

```bash theme={null}
curl https://api.arct.cloud/v1/account \
  -H "Authorization: Bearer $ARCT_TOKEN"
```

## Create a Token

* Create one in **Settings** > **API Tokens** ([steps](/account/api-tokens.md)). The secret is shown once.
* Expiry: **Never**, **30 days**, **90 days** or **1 year**.
* The account owner gets an [email](/account/api-tokens.md#token-created-email) for each new token, without the secret.
* The API can't manage tokens.

## Token Format

`arct_` plus letters, digits, `-` and `_`, up to 100 characters; the dashboard shows the first 12.

## Access Levels

| Scope | Dashboard label | Allows |
| - | - | - |
| `read` | Read only | Every `GET` endpoint. |
| `read_write` | Read & write | Every endpoint, including charges and deletes. |

Keep tokens server-side; use `read` tokens for read-only jobs.

## Auth Errors

`401`: the token can't be used. `403`: the token is valid but the request isn't allowed.

| HTTP | Code | Cause |
| - | - | - |
| `401` | `invalid_token` | Missing, malformed, unknown or deleted. |
| `401` | `token_disabled` | Disabled; works again once re-enabled. |
| `401` | `token_expired` | Expired. |
| `403` | `account_disabled` | Account disabled. |
| `403` | `api_access_disabled` | API not enabled for your account; contact support. |
| `403` | `insufficient_scope` | `read` token on a write endpoint. |
| `429` | `rate_limit_exceeded` | Too many [failed attempts](/api-reference/rate-limits.md#failed-authentication). |

## Rotate a Token

Create a new token and switch to it. When the old token's **Last used** stops changing (it updates at most once a minute), disable it, then delete it.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.