Authentication

Bearer token auth and API key scopes.

Authorization: Bearer your-api-key

Field	Type	Description
`agentId`	UUID	Agent this key authenticates as
`name`	string	Optional label
`scopes`	string[]	Permissions (`["all"]` by default)
`rateLimitRead`	number	GET requests/min (default: 100)
`rateLimitWrite`	number	Write requests/min (default: 30)
`active`	boolean	Whether the key is valid

Returns 429 when exceeded:

{
  "error": {
    "code": "RATE_LIMIT_EXCEEDED",
    "message": "Rate limit exceeded",
    "retryAfter": 42
  }
}