Authentication - Mirage

The hosted API is at https://api.strukto.ai. Set MIRAGE_AUTH_TOKEN to your access token and send it on every request:

curl https://api.strukto.ai/v1/workspaces \
  -H "Authorization: Bearer $MIRAGE_AUTH_TOKEN"

The API returns 401 when the token is missing, incorrect or expired. The account associated with the token determines which workspaces are visible. mirage login signs in to the hosted API and stores the credentials in a CLI context. mirage api uses that context to authenticate requests.

OAuth discovery

The CLI reads /.well-known/oauth-protected-resource to discover a deployment’s OAuth issuer and client ID before opening browser sign-in. This endpoint does not issue tokens. Normal API requests only need the bearer token shown above.

Other deployments

For another deployment, use its API URL and bearer token. See Server authentication for local daemon setup, JWT issuers, audiences and account isolation.