Authentication

All /v1 endpoints require a Bearer API key created in the dashboard:

Authorization: Bearer sk-cm-live-...

Keys are stored as SHA-256 hashes. The full secret is shown once at creation. Revoked keys return 401 invalid_api_key.