> ## Documentation Index
> Fetch the complete documentation index at: https://vobiz.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate every Vobiz API request with the X-Auth-ID and X-Auth-Token headers - where to find your credentials, request format, and common auth errors.

Every Vobiz REST API request is authenticated with two headers - there's no OAuth flow, no token exchange, and no expiry to manage.

<Info>
  **Required headers on every request:**

  * `X-Auth-ID` - Your account Auth ID
  * `X-Auth-Token` - Your account Auth Token
</Info>

## Where to find your credentials

After signing in to the [Vobiz Console](https://console.vobiz.ai), your **Auth ID** and **Auth Token** are displayed directly on the main dashboard. Copy both - you'll pass them as headers on every API call.

<Frame>
  <img src="https://mintcdn.com/vobizai/cPP2drhQ7lKsmogc/images/console-new-ui/dashboard.png?fit=max&auto=format&n=cPP2drhQ7lKsmogc&q=85&s=8cdde70ab01f733540987bb4b4700a09" alt="Vobiz dashboard showing Auth ID, Auth Token, and account balance" width="2936" height="1482" data-path="images/console-new-ui/dashboard.png" />
</Frame>

Your Auth ID looks like `MA_XXXXXXXX`. Treat your Auth Token like a password - anyone with both values can act on your account.

## Making an authenticated request

```bash cURL theme={null}
curl -X GET https://api.vobiz.ai/api/v1/auth/me \
  -H "X-Auth-ID: YOUR_AUTH_ID" \
  -H "X-Auth-Token: YOUR_AUTH_TOKEN"
```

A successful call to `/auth/me` returns your full account object, including verification status and pricing tier - a good way to confirm your credentials work before building further. See [Retrieve Account Details](/account/retrieve-account) for the full response shape.

For the full error response format and all status codes, see [Error Handling](/errors).

## Security notes

* Never expose `X-Auth-Token` in client-side code (browser JS, mobile apps). Route API calls through your own backend.
* If a token is compromised, regenerate it from the Console dashboard immediately - the old token stops working as soon as you do.