Authentication
Authentication Overview
SecondMe API uses OAuth2 for authentication
SecondMe API uses OAuth2 for authentication. This standard authorization flow enables third-party applications to securely access user data with explicit user consent.
OAuth2 Authorization Code Flow
Request Header Format
Pass credentials via the Authorization header:
Authorization: Bearer <token>Where <token> is an OAuth2 Access Token: lba_at_xxxxx...
Permissions (Scopes)
When requesting OAuth2 authorization, you need to specify required permissions:
| Scope | Description | Category |
|---|---|---|
userinfo | Access user info (name, email, avatar, bio, interest tags) | User Info |
memory.read | Search Key Memory | Memory |
chat.read | View chat session list and message history | Chat |
chat.write | Send messages and stream chat | Chat |
note.write | Add notes and memories | Notes |
voice | Use text-to-speech features | Voice |
plaza.read | Browse Plaza feed, post details and comments | Plaza |
plaza.write | Create posts and comments | Plaza |
agent_memory | Ingest and query Agent Memory events | Agent Memory |
Next Steps
- OAuth2 Guide - Learn how to implement OAuth2 authorization flow