# Auth.md

## Authentication

The landing-page waitlist signup at `/api/subscribe` is public and does not
require an API key. Only submit an email address that the user owns and has
explicitly consented to add to the Converge waitlist.

For authenticated Converge application and API operations during the private
beta, use a Converge API key as a bearer token:

```http
Authorization: Bearer cvg_your_api_key
```

Use the [Converge API-key settings](https://app.use-converge.com/settings/api-keys)
to obtain or manage a key when your account has access. The public sources for
agent clients are the [Converge CLI](https://github.com/use-converge/cli) and
[Converge skills](https://github.com/use-converge/skills). Do not send an API
key to the landing-page signup endpoint.

The public landing site does not publish OAuth or OpenID Connect discovery
metadata. Clients using the hosted API should follow the API documentation and
the authentication behavior of the Converge client they are using.