Film Fun Authentication

generated: '2026-10-30'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://splice.film.fun/auth.md
sources:
- https://splice.film.fun/auth.md
description: 'Splice accepts two credentials: an OAuth 2.1 access token (authorization code + PKCE) and an agent key (sk_…) used as a bearer token.'
schemes:
- type: http-bearer
  name: OAuth 2.1 access token
  evidence: 'Splice (https://splice.film.fun) accepts two credentials, both acting as one Splice user and spending that user''s credits: - an
    **OAuth 2.1 access token** (authorization code + PKCE, with dynamic client registration), for clients that can send the user to a browser
    once;'
  flows:
  - authorization_code
  authorize_url: https://splice.film.fun/oauth/authorize
  scopes:
  - splice:read
  - splice:generate
  - splice:compose
  - splice:produce
  how_to_obtain: Register a public client via dynamic registration (POST /oauth/register) to get a client_id, then send the user to the authorize
    URL with PKCE and the desired scopes, receive an authorization code, and exchange it at the token endpoint (POST /oauth/token) for an access
    token.
- type: http-bearer
  name: Agent key
  evidence: The user gave you an agent key (`sk_…`) → skip to [Step 6](#step-6--use-the-credential).
  how_to_obtain: Create an API key in the user dashboard at https://splice.film.fun/dashboard/api-keys and use the returned `sk_…` value as a
    Bearer token.
docs: https://splice.film.fun/auth.md