> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ageneral.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Console sign-in, session tokens, virtual keys, and Models credentials

Ageneral splits traffic across two HTTPS hosts. Each host accepts different credentials.

## Hosts and credentials

| Host                             | Purpose                                              | Typical credential                                                             |
| -------------------------------- | ---------------------------------------------------- | ------------------------------------------------------------------------------ |
| **`https://ageneral.ai`**        | Console-backed APIs: projects, members, keys, agents | Bearer token from **sign-in**                                                  |
| **`https://models.ageneral.ai`** | OpenAI-compatible **Models** inference               | **Virtual key** **`sk-bf-…`**, or infrastructure-issued token where documented |

Send **`Authorization: Bearer <token>`** unless a route specifies otherwise.

## Console and scripts

1. Sign in at **`https://ageneral.ai`** to manage **projects**, **members**, **keys**, and **agents**.
2. For standalone scripts and servers calling **`https://models.ageneral.ai`**, create a **virtual key** and pass it in **`Authorization`**.
3. Browser sign-in does **not** replace Bearer tokens for automated **Models** calls.

OAuth flows for supported clients (for example IDE extensions) are documented on those client pages.

## Models host details

`https://models.ageneral.ai` accepts:

| Credential                             | Use                                                                |
| -------------------------------------- | ------------------------------------------------------------------ |
| **Virtual key** — prefix **`sk-bf-…`** | Applications, automation, and integrations **you** configure       |
| **Infrastructure credentials**         | Traffic from **Ageneral-hosted agents**; **not** user-created keys |

Example:

```http theme={"theme":{"light":"material-theme-lighter","dark":"material-theme-palenight"}}
Authorization: Bearer <token>
```

Bearer tokens that use unsupported **`sk-…`** shapes return **401 Unauthorized**.

## Next steps

* [Models](/models) — endpoints and identifiers
* [Quickstart](/quickstart) — first **Models** request
* [Agents](/agents) — how agents access **Models**
* [Usage and billing](/guides/models/usage-and-billing) — credits and wallet behavior
* **API reference** tab — **Models**, **Projects**, **Agents**