# Authentication

The API uses **Bearer Token** authentication via Laravel Sanctum.

## Obtaining a Token

1. Log in to your [Developer Dashboard](/dashboard).
2. navigate to the **API Tokens** section.
3. Click "Create Token", give it a name, and copy the generated secret.

> [!WARNING]
> Keep your token secure. You won't be able to see it again after creation.

## Authenticating Requests

Include your token in the `Authorization` header:

```http
Authorization: Bearer 1|HmPRualjvtlqAHD3s1Ld7MU6bRr8rt...
```

### Example Request

```bash
curl -X GET https://developer.nabzclan.vip/api/user \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Accept: application/json"
```

## Token Limits

The number of active tokens you can generate depends on your plan:

- **Free**: 1 Token
- **VIP 1**: 3 Tokens
- **VIP 2**: 5 Tokens
- **VIP 3**: 10 Tokens
- **VIP 4**: 20 Tokens