> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hopae.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction

> Authenticate with workspace API keys and call the workspace endpoints.

## What is a workspace?

A **workspace** is your Hopae Connect account — it corresponds 1:1 with your Console organization. There is no separate "create workspace" API call: signing up for Hopae Connect through the Console provisions your workspace automatically. Inside a workspace you manage one or more [Apps](/api-reference/workspace/create-app) (typically one per end-customer or per product surface), each of which can activate any combination of eID providers.

## API Key

Create and manage keys in the Console under **Developers → Workspace API Keys**. Keys are environment-specific (`sandbox`, `production`) and begin with `sk_workspace_`.

<img src="https://mintcdn.com/hopae-a83466ba/b7aGfsugmRWjV0Cu/images/workspace-api-key.png?fit=max&auto=format&n=b7aGfsugmRWjV0Cu&q=85&s=5b0bf42a2ed7a5785fbc2892d26e7424" alt="Workspace API key issuance UI showing key creation and copy controls" width="1280" height="1034" data-path="images/workspace-api-key.png" />

### Authentication

Workspace API requests use `Authorization: Bearer <API_KEY>`.

<CodeGroup>
  ```bash Header theme={null}
  Authorization: Bearer sk_workspace_...
  Content-Type: application/json
  ```

  ```bash cURL theme={null}
  curl -H "Authorization: Bearer sk_workspace_..." \
    -H "Content-Type: application/json" \
    "https://sandbox.api.hopae.com/connect/v1/workspace"
  ```
</CodeGroup>

## Credential Types

| Credential                      | Format                                                       | Used for                                                         |
| ------------------------------- | ------------------------------------------------------------ | ---------------------------------------------------------------- |
| **App clientId + clientSecret** | `clientId`: 8-char alphanumeric, `clientSecret`: 64-char hex | Verification API (Basic Auth), OIDC flow (`client_id` parameter) |
| **Workspace API key**           | `sk_workspace_...`                                           | Workspace API (Bearer Auth) — manage apps, providers, webhooks   |

<Warning>
  Do not confuse the two. App credentials authenticate verification requests from end-users. Workspace API keys authenticate management operations.
</Warning>

## Base URLs

<CodeGroup>
  ```bash Production theme={null}
  https://api.hopae.com/connect/v1
  ```

  ```bash Sandbox theme={null}
  https://sandbox.api.hopae.com/connect/v1
  ```
</CodeGroup>