> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sitecopilot.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

Two token types:

* **Admin token** (Central domain): required for central administrative endpoints. Retrieve it securely from the **Dashboard** when authenticated; the underlying `/admin-config` endpoint is **not public** and requires an authenticated session.
* **Tenant token** (Tenant domain): required for tenant-scoped endpoints. Also retrieved from the **Dashboard** when authenticated on the tenant domain.

## Headers

```
Authorization: Bearer <TOKEN>
Content-Type: application/json
```

> Keep central and tenant tokens in separate environments. Do not expose tokens in client-side code.