Authentication

All API requests require two headers for authentication:

Required Headers

Header	Description
X-Tenant-ID	Your tenant UUID (provided during onboarding)
X-API-Key	Your API key (provided once at tenant creation)

Example

curl https://beta.kernelservice.com/api/v1/tasks \
  -H "X-Tenant-ID: 550e8400-e29b-41d4-a716-446655440000" \
  -H "X-API-Key: ks_a1b2c3d4e5f6..."

Admin Endpoints

Tenant provisioning endpoints (/admin/v1/...) use a separate admin key:

Header	Description
X-Admin-Key	Admin API key for provisioning operations

Security Notes

• API keys are hashed and stored securely (never in plaintext)
• All traffic is encrypted via TLS 1.3
• Each tenant’s data is isolated in separate database storage
• Tool credentials are stored encrypted in AWS SSM Parameter Store