Authentication

InsightAgent supports two authentication methods for accessing the platform and API.

Web Application Login

Sign in to the web application at app.insightagent.io using:

• Email and password

• Google OAuth (if enabled for your account)

API Authentication

For programmatic access, InsightAgent supports two authentication methods:

Bearer Token (JWT)

Use your session token in the Authorization header:

curl -X GET "https://api.insightagent.io/api/interviews" \
  -H "Authorization: Bearer <your-jwt-token>"

API Keys

For server-to-server integrations, use API keys:

1. Go to Settings > API Keys

2. Click Generate New Key

3. Copy and securely store the key (it won't be shown again)

curl -X GET "https://api.insightagent.io/api/interviews" \
  -H "x-api-key: <your-api-key>"

Security Best Practices

• Never share API keys in client-side code

• Rotate API keys periodically

• Use environment variables to store credentials

• Limit API key permissions to only what's needed

Expert Access (Ungated)

Experts joining web interviews do not need to authenticate. They access interviews via unique, secure links:

https://app.insightagent.io/call/{interview-id}/join

These links are single-use and tied to specific interviews.