Skip to main content

Authentication

Authentication methods for the two Flow Agent API endpoint families.

The Flow Agent API contains two endpoint families with different authentication methods.

Application invocation endpoints

Call through the DashScope application gateway with a Bailian API Key, created in the console:
Authorization: Bearer <your-api-key>

Component endpoints (Prompt templates and more)

These belong to Alibaba Cloud OpenAPI and use AccessKey signatures (ACS3-HMAC-SHA256); Authorization: Bearer is not supported. We recommend calling them with an Alibaba Cloud SDK or OpenAPI Explorer to avoid computing signatures manually.
Managed Agent API
Flow Agent API
Sandbox API
RAG API
Long-term Memory
ParseX API
Security API
Framework Integration