# auth.md

beehiiv does not let an agent register a user or create an API client by itself. A person provisions credentials, then the agent uses them.

## Audience

Integrations and agents calling the beehiiv API for a publication the person owns.

## API key

A person creates a key in the dashboard. Send it as a bearer token.

- Create a key: https://developers.beehiiv.com/welcome/create-an-api-key.md
- API docs: https://developers.beehiiv.com/

## OAuth 2.0

The authorization server is `https://app.beehiiv.com/`. There is no public client-registration endpoint and no `register_uri`.

- Authorize: `GET https://app.beehiiv.com/oauth/authorize`
- Token: `POST https://app.beehiiv.com/oauth/token`
- Revoke: `POST https://app.beehiiv.com/oauth/revoke`
- Flow and scopes: https://developers.beehiiv.com/oauth2.md
- Protected resource metadata: https://www.beehiiv.com/.well-known/oauth-protected-resource