> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leamout.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API credentials

> Use scoped organization tokens for integrations and automation.

Leamout uses organization-owned API credentials for server-to-server requests. Create a credential through the Leamout Console for the organization you want to integrate.

## Choose scopes

Grant only the resource permissions your application needs. For example, an integration that lists and controls calls requires:

```text theme={null}
calls:read
calls:write
```

An integration that uploads or configures recording storage requires `storage:write`. AI integration and agent tool operations use `voice-agents` scopes.

## Authenticate

Save the generated token when it is shown. Send it over HTTPS as a bearer token:

```http theme={null}
Authorization: Bearer lm_org_...
```

Store tokens in a secrets manager. Do not embed them in a browser app, mobile client, source code, or logs.

Tokens belong to a single organization; passing `X-Organization-ID` does not change their organization.

See [Authentication](/authentication) for the complete scope model.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.