Authentication

Gateway requests use a Taimoe Virtual Key. The preferred form is a bearer token:

Authorization: Bearer $TAIMOE_VIRTUAL_KEY

The Gemini-compatible Gateway also accepts:

x-api-key: $TAIMOE_VIRTUAL_KEY

Connector sync reporting uses its separately issued ingest token:

X-Connector-Token: $TAIMOE_CONNECTOR_TOKEN

Virtual Keys and Connector tokens are different identities and are not interchangeable. A Virtual Key identifies a Team workload calling the Gateway. A Connector token identifies one Connector and can only report that Connector's runs.

Token handling

Store tokens in a secrets manager. Do not expose them in client-side code, mobile apps, logs, URLs, screenshots, or support tickets. Plaintext tokens are shown only when issued; rotate the token if it is lost or exposed.