Past Dev Authentication

generated: '2026-10-31'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://past.dev/docs/memory-api/authentication
sources:
- https://past.dev/docs/memory-api/authentication
- https://past.dev/docs/memory-api/authentication/llms.txt
- https://past.dev/auth.md
- https://past.dev/tools/token-cost-calculator
description: Authentication methods for past-dev Memory API
schemes:
- type: http-bearer
  name: Project key
  evidence: 'Authorization: Bearer $PAST_API_KEY'
  location: header
  header: Authorization
  how_to_obtain: Created on the API keys screen of the console at https://app.past.dev or via POST /api/v1/projects/{slug}/keys
- type: http-bearer
  name: Management key
  evidence: 'Authorization: Bearer $PAST_API_KEY'
  location: header
  header: Authorization
  how_to_obtain: Created under Settings → Organization → Management key in the console by an Owner or Admin at https://app.past.dev
- type: oauth2
  name: Agent token
  evidence: 'WWW-Authenticate: Bearer resource_metadata="https://app.past.dev/.well-known/oauth-protected-resource/api/v1"'
  location: header
  header: Authorization
  scopes:
  - memory:read
  - memory:write
  how_to_obtain: Agent registers via the agent_auth flow described at https://api.past.dev/auth.md, exchanging an identity assertion for a short‑lived
    access token from the authorization server https://sso.past.dev
docs: https://past.dev/docs/memory-api/authentication