Authentication

Reyhford uses Bearer token authentication at the API gateway (reyhford.com/api).

TAXII 2.1 (machine clients)

TAXII collection and object endpoints require an API key:

Authorization: Bearer <your-api-key>

API keys are issued from reyhford.com/portal. Keys are stored as SHA-256 hashes server-side; the plaintext is shown once at creation.

Treat API keys like passwords. Rotate keys if compromised and never commit them to source control.

Endpoint	Auth required
`GET /taxii2/` (discovery)	No
`GET /taxii2/collections/`	API key
`GET /taxii2/collections/{id}/objects/`	API key

The /v1/indicators/* endpoints accept:

curl -s https://reyhford.com/api/v1/indicators/{id} \
  -H "Authorization: Bearer <token>"

Rate limits apply per API key. TAXII polling should use incremental added_after cursors rather than full feed pulls.

Status	Meaning
`401`	Missing or invalid token
`403`	Valid token but insufficient scope
`429`	Rate limit exceeded — back off and retry

See the Quickstart for a working curl example.