Doc Doctor demo · Josué Guevara

Citation gap → footnote

Doc Doctor — citation resolution1/4 · Citation gap

Authentication guide

GuidesAuthentication guide

Properties

form: developing
audience: public
owner: developer-experience
release: 2026.09
refinement: 0.72
stubs: link · 2expand · 2question · 1

Authenticate API requests

Clients authenticate with bearer tokens issued from a workspace. Keep tokens outside source control and inject them through the runtime environment.

Create credentials

Workspace owners and administrators can create API credentials from Settings → Developer. Clarify which custom roles inherit this permission.^stub-role-scope

Send a request

Pass the token in the Authorization header on every request. Add browser-client guidance and CORS example.^stub-browser-example

curl https://api.example.test/v1/items \
  -H "Authorization: Bearer $API_TOKEN" \
  -H "Accept: application/json"

Retry transient failures

Retry failed requests for up to 30 seconds using capped exponential backoff.^stub-retry-policyCITATION NEEDED

Retry failed requests using capped exponential backoff with a maximum retry window of 30 seconds.^{[^1]}

[^1]: Retry policy benchmark fixture, validation run 04.

The service returns 429 when a workspace exceeds its burst allowance. Verify whether Retry-After is emitted on every 429 response.^stub-retry-after

Rotate tokens

Rotation can overlap old and new credentials during migration. What is the supported grace period for overlapping credentials?^stub-rotation-window

Doc Doctor · stubsMarkdown

The document text is a synthetic fixture. The stub list, controls, anchor treatment, and workspace geometry follow the current Doc Doctor and Obsidian implementations.