Skip to main content

Authentication

Authentication methods for the two Flow Agent API endpoint families

The Flow Agent API contains two endpoint families with different authentication methods.

Application invocation endpoints

Call through the DashScope application gateway with a Bailian API Key, created in the console:
Authorization: Bearer <your-api-key>

Component endpoints (Prompt templates and more)

These belong to Alibaba Cloud OpenAPI and use AccessKey signatures (ACS3-HMAC-SHA256); Authorization: Bearer is not supported. We recommend calling them with an Alibaba Cloud SDK or OpenAPI Explorer to avoid computing signatures manually.
Once configured, start with Get APP ID and Workspace ID.