> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aris247.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate with the ARIS widget, REST API, MCP server, and CLI.

## Widget embed (no auth required)

The embed snippet uses a `data-brokerage-id` attribute. This is a public identifier — it does not grant write access and is safe to include in client-side code.

```html theme={null}
<script
  src="https://aris247.com/widget.js"
  data-brokerage-id="YOUR_BROKERAGE_ID"
  async>
</script>
```

## API keys

For programmatic access (REST API, MCP, CLI), create a developer API key in the ARIS dashboard under **Settings → Developer Keys**.

API keys are prefixed with `aris_` and scoped to your brokerage. Include the key in every request:

```
X-ARIS-API-Key: aris_yourkey
```

### Key properties

| Property  | Description                            |
| --------- | -------------------------------------- |
| Prefix    | `aris_`                                |
| Scope     | Bound to one brokerage                 |
| Revocable | Set to inactive without deleting       |
| Trackable | `last_used_at` updated on each request |

### Creating a key

<Steps>
  <Step title="Log in">
    Go to [aris247.com/login](https://aris247.com/login).
  </Step>

  <Step title="Navigate to Developer Keys">
    **Settings → Developer Keys → Create Key**
  </Step>

  <Step title="Name it">
    Give it a name like "Production", "Staging", or "CI".
  </Step>

  <Step title="Copy the key">
    Copy the key — it won't be shown again.
  </Step>
</Steps>

### Environment variable

Store your key as an environment variable rather than hardcoding it:

```bash theme={null}
export ARIS_API_KEY=aris_yourkey
```

The [CLI](/docs/cli/overview) and [MCP server](/docs/mcp/overview) both read `ARIS_API_KEY` from the environment automatically.

### Revoking a key

In the dashboard, toggle a key to **Inactive**. The key immediately stops working but is not deleted, so you can reactivate it later.