Authentication

OAuth 2.0

The Rntor API uses OAuth 2.0 for authentication. All API requests must include a valid access token in the Authorization header.

Authorization: Bearer YOUR_ACCESS_TOKEN

Keep your Client Secret secure. Never expose it in client-side code or public repositories.

All API requests must include the following headers:

Header	Description
`Authorization`	Your API client secret as a Bearer token
`X-Client-ID`	Your API client ID
`Content-Type`	`application/json` for requests with a body

curl -X GET "https://api.rntor.com/v1/networks" \
  -H "Authorization: Bearer YOUR_CLIENT_SECRET" \
  -H "X-Client-ID: YOUR_CLIENT_ID"

API keys can be configured with specific scopes to limit access:

Request only the scopes your integration needs. This follows the principle of least privilege.