> ## Documentation Index
> Fetch the complete documentation index at: https://docs.concretehq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Secure access to the Concrete API using API keys and authentication best practices

## Overview

The Concrete API uses API key-based authentication to secure access to your portfolio data. Each API key is associated with your workspace.

## Obtaining an API Key

<Steps>
  <Step title="Access Settings">
    Navigate to **Settings** → **API Keys** in your Concrete dashboard
  </Step>

  <Step title="Generate Key">
    Click **"Generate New API Key"**
  </Step>

  <Step title="Copy & Store">
    Securely copy and store the API key
  </Step>
</Steps>

## API Key Structure

```
sk-ak-1234567890abcdef1234567890abcdef
```

## Bearer Token Authentication

Concrete uses a bearer token authentication header for API requests:

```http theme={null}
GET /api/v1/me HTTP/1.1
Host: app.concretehq.com
Authorization: Bearer sk-ak-1234567890abcdef1234567890abcdef
Content-Type: application/json
```