> ## Documentation Index
> Fetch the complete documentation index at: https://developer.ammdistro.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Send your API key as a bearer token on every request.

Every request needs an API key in the `Authorization` header:

```bash theme={"dark"}
curl -s "https://api.ammdistro.com/api/v2/external/delivery/accounts" \
  -H "Authorization: Bearer $AMMD_API_KEY"
```

Keys start with `ammd_ing_`, followed by 43 characters. Only the first few characters are shown in AMM Distro after the key is created.

## Access levels

| Access | Scopes | Can do |
| - | - | - |
| Send releases | `delivery:read`, `delivery:write` | Everything: create, update, upload, validate, submit, read. |
| Read only | `delivery:read` | List and read releases and transfers, validate, read reference data. |

A read-only key that tries to change something gets `403 insufficient_scope`.

## Authentication errors

| Status | `error` | Meaning |
| - | - | - |
| 401 | `missing_api_key` | No `Authorization: Bearer` header. |
| 401 | `invalid_api_key` | The key is wrong or has been revoked. |
| 403 | `insufficient_scope` | The key doesn't have the access this request needs. |
| 403 | `api_access_disabled` | API access is turned off for the accounts this key covers. |

Your key never travels anywhere except in this header. Requests are only accepted over HTTPS.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.