Short-lived HS256 JWT. Send as Authorization: Bearer <token> on all other endpoints.
Authorization: Bearer <token>
Seconds until the JWT expires (typically 3600).
Optional
Subscription tier this token was issued for. Drives rate limits and feature flags on downstream endpoints.
Always Bearer.
Bearer
Short-lived HS256 JWT. Send as
Authorization: Bearer <token>on all other endpoints.