# Auth types



> TODO: this is the single source of truth for auth types (Usage → Auth types links here). Full table with HTTP header, curl equivalent, and a concrete example manifest per type. Cover `auth.env`, `auth.type`, `auth.header` (api-key), and how `basic` expects the env var to already be base64-encoded.