Authentication

X-SWARM-API-KEY header and production fail-closed behavior.

Set SWARM_API_KEY on the server. Clients send X-SWARM-API-KEY on write routes.

Production (SWARM_ENV=production, SWARM_REQUIRE_AUTH=1, or RAILWAY_ENVIRONMENT) fails closed without a key (503).

PreviousOverviewNext Errors and status codes