Authentication
MeshTale API authentication schemes and audience scope basics.
MeshTale exposes two authentication schemes in its OpenAPI schema.
Bearer tokens
Most programmatic API calls use HTTP Bearer authentication.
Authorization: Bearer mt_...Workspace API keys should be scoped to the smallest workspace and capability set required
by the integration. Several OpenAPI operations also declare a MeshTale capability extension
that describes the required permission, such as sources:read or audit:read.
Session cookie
Browser-backed admin and account flows can use the meshtale_session cookie. The OpenAPI
schema names this scheme sessionCookie.
Audience scope
MeshTale retrieval and memory surfaces are audience-aware. API calls can include audience query fields where supported by the endpoint, and workspace defaults apply when a request does not specify a narrower audience. Treat audience scope as part of authorization: choose the least broad audience that still satisfies the product flow.