Authentication

Personal access tokens

The fastest way to start. Mint one from Settings → API Tokens in the app. Tokens start with omvt_live_ and never expire unless you rotate them.

curl -H "Authorization: Bearer omvt_live_xxxx" \
  https://app.omegavault.app/v1/memories

Scopes

Each token can be scoped to limit what it can do:

• memories:read — list and search memories.
• memories:write — create, update, delete.
• collections:read / collections:write — same, for collections.
• admin — everything. Use sparingly.

OAuth apps (coming soon)

For integrations that act on behalf of other OmegaVault users, you'll register an OAuth app and complete the standard authorization-code flow. Watch the Developer docs for the go-live.

Storage

Store tokens as environment variables or in a secrets manager. Never commit them to source. If a token leaks, rotate it immediately from Settings → API Tokens.