# Authentication & access

How access works on promenaut.ai.

## Public endpoints

The public API endpoints (`/api/v1/contact`, `/api/v1/newsletter`, `/api/v1/request-access`) are unauthenticated. They accept JSON and are intended for contact, subscription, and resource-access requests. See [/api.md](https://www.promenaut.ai/api.md).

## Gated resources

Some resources in the resource library are gated. The flow is:

1. `POST /api/v1/request-access` with your email (and optional name/company).
2. The team reviews the request.
3. On approval, you receive a magic link by email that sets a short-lived access cookie.
4. With the cookie set, the gated resource is served.

There are no public API keys or tokens for this flow; access is granted by the magic link.

## Platform access

The Promenaut platform itself is an enterprise product provisioned per engagement. Platform credentials and any integration surface are set up with your team and scoped to your environment, not issued as a public self-serve key. Email hello@promenaut.ai or use the [contact endpoint](https://www.promenaut.ai/api.md) to start.