Authentication

Nenjo uses two authentication methods depending on the context.

Dashboard (Frontend)

The dashboard uses Clerk for user authentication. Users sign in via the /dashboard/login page with email, OAuth, or SSO depending on your configuration.

API Access

For programmatic access (API calls, MCP connections, worker communication), Nenjo uses API keys.

API keys are scoped tokens that grant access to specific resources. See API Keys for details on creating and managing keys.

Request format

Include your API key in the Authorization header:

curl -H "Authorization: Bearer nj_your_api_key" \
  https://your-instance.com/api/v1/agents

Scopes

API keys use a scope system to control access. Each scope follows the pattern resource:action:

tickets:read
tickets:write
agents:read
agents:write

A :write scope implicitly grants :read for the same resource. An API key with no scopes has full access.