# Authentication

Sign in to your API account and copy your key. Then call the account endpoint with an Authorization: Bearer header. A successful response includes ok, data and meta.

[My API account](https://www.arnproxy.com/account/api/) 
## Authorization

```http
Authorization: Bearer YOUR_ARNPROXY_API_KEY
Accept: application/json
```

Examples are not executed on this page. Keep the API key in a server-side environment variable; do not put real keys in URLs or browser code. Prepare request.json for POST examples.

Keys remain valid until renewed or revoked. Renewal invalidates the old key; it does not reset limits, restore restricted permissions or disable saved automatic renewal.

## Authentication · IP

An optional source-IP allowlist restricts where the API key can be used. It does not change proxy authorized IPs. Configure it on your normal API account page.

## Required permission

Use capabilities and each scope/options endpoint to discover effective permissions and available actions. Listing an operation is not permission to execute it. Account restrictions and service expiry still apply.

- [**Permissions and available operations →****GET** `/capabilities`](https://docs.arnproxy.com/api-v1/account/capabilities)
- [**Verify credential group and available actions →****GET** `/proxies/{id}/access`](https://docs.arnproxy.com/api-v1/proxies/access)

---
[ARNPROXY API](https://docs.arnproxy.com/api-v1/authentication)