# Authentication

> One bearer token per workspace. The workspace is the boundary of a memory.

Product: Revo Memory API. Source: https://www.revo.ai/docs/memory-api/authentication

Every request carries `Authorization: Bearer $REVO_API_KEY`. The token resolves its workspace server-side, and a token can never read or write another tenant's content.

If the token reaches more than one workspace, pass `teamId` on each request to name the intended one. A single-workspace token needs nothing.

> **During early access**
>
> Tokens are issued by hand. There is no dashboard, no programmatic issuance, and no rotation endpoint yet. Self-serve keys are dated in the roadmap below.