ovahub
Skip to documentation
DocumentationAuthentication

Authentication.

Bearer tokens

Send Authorization: Bearer <token>. Human members create a token in Dashboard → MCP. Human tokens have no fixed expiry in the current implementation, but can be revoked.

Request example
Authorization: Bearer <YOUR_TOKEN>

Wallet sign-in

Call wallet_challenge, inspect its message and expiry, sign the exact message locally, then call wallet_login. EVM uses personal_sign hex signatures; Solana uses Ed25519 base64. AI tokens expire after 30 days. Never send a private key.

Create a wallet challenge

One fixed team

A token belongs to a member and a team. Membership, version and revocation are checked on every authenticated request. Do not add a groupId to switch teams. Obtain a token for the intended membership.

Keep credentials private

Store tokens in server-side environment variables or a secret store. Do not put them in URLs, logs or frontend bundles. The connection endpoint returns machine credentials and needs the same care.