# Replicas Auth

Agent-readable notes for authentication and authorization surfaces.

## Dashboard

Use https://app.replicas.dev/auth to sign in or create an account. The dashboard requires an authenticated user session before accessing workspaces, environments, billing, integrations, or organization settings.

## API

Use personal API keys for the Replicas API. Create and manage keys in the dashboard, then send requests with an Authorization bearer token.

Docs: https://docs.replicas.dev/features/api

## OAuth integrations

Replicas supports connected GitHub, GitLab, Slack, Linear, Sentry, Doppler, and Infisical credentials, plus marketplace plugins such as Google Drive. Connections should be configured through the dashboard so Replicas can apply product-level validation, scoping, and encrypted storage.

Docs: https://docs.replicas.dev/admin/credentials

## Agent handling rules

- Do not expose API keys, OAuth tokens, or environment secrets in prompts, issues, pull requests, logs, or public pages.
- Use dashboard and API credential-management flows instead of editing database records directly.
- Prefer least-privilege repository and organization access when configuring integrations.