Authentication

JWT for platform routes; API keys for /api/v1.

AGENTS.md

Send credentials on every request.

POST/api/auth/telegram-login/
POST/api/auth/send-otp/
POST/api/auth/verify-otp/

API key header

Authorization: Bearer pk_live_… or ?api_key= on v1 only.