Skip to main content

Auth And Session Model

For users building integrations, the key distinction is between:

  • the signed-in web session used in the product UI
  • the API key or authenticated credential used by external tools

Web session​

The web session is for using the product directly, including account management and API-key management.

Integration credential​

An API key is the right tool when an external script or agent needs to call supported Virae routes on behalf of your account.

Why the distinction matters​

Keeping these two access modes separate makes it easier to reason about:

  • which actions belong in the UI
  • which actions belong in an integration
  • how to rotate or revoke access safely