Skip to main content

Authentication

Nanovate supports email/password sign-in and single sign-on, and secures API access with bearer tokens.

Sign-in options​

  • Email & password — standard registration with email-based password reset.
  • Google SSO — sign in with a Google account.
  • LinkedIn SSO — sign in with a LinkedIn account.

Two-factor authentication (2FA)​

You can enable 2FA on your account from Settings → Account. Once enabled, a second factor is required at sign-in in addition to your password.

API access tokens​

Programmatic access uses a JWT bearer token. Send it on every request:

GET /agents HTTP/1.1
Host: api.nanovate.io
Authorization: Bearer <your-token>

Tokens are issued at sign-in and on OAuth callback. Treat them as secrets — never commit them to source control or paste them into shared logs.

tip

The running API exposes an OpenAPI document at /openapi.json, which is the authoritative contract for request and response shapes.