> ## Documentation Index
> Fetch the complete documentation index at: https://developers.resistant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

The Resistant Documents API uses **OAuth 2.0 Client Credentials**. All API requests must include an access token in the `Authorization` header.

## How to authenticate API requests

Include the access token as a Bearer token:

```http theme={null}
Authorization: Bearer <access_token>
```

<Note>
  To obtain an access token (including the correct Token URL for your stage/cell), see [Getting an access token](/getting-started/getting-access-token).
</Note>

## Scopes (high level)

Tokens are issued with scopes that control what the caller can do. Common scopes:

* `submissions.write` — create submissions and perform write operations
* `submissions.read` — fetch analysis results

## Base URL (stage/cell)

API hostnames differ by **stage** (Testing vs Production) and **cell** (eu-1/us-1/ca-1/ap-2/ap-3).

See [Concepts](/getting-started/concepts) → Environments for the hostname patterns and mapping.

<Tip>
  Keep your **base URL** and **token URL** aligned to the same stage/cell.
</Tip>