Authentication

Magic Link Sign-In

MetaMemory uses passwordless authentication via magic links:

POST https://api.metamemory.tech/v1/auth/magic-link
{ "email": "you@company.com" }

Check your email and click the link. You'll be redirected to the dashboard with a fresh API key.

Note: Each sign-in rotates your API key. The previous key is immediately invalidated.

API Key Format

API keys follow the format mm_live_<32 hex chars>. Include it in every request:

Authorization: Bearer mm_live_your_key_here

Keys are SHA-256 hashed before storage — MetaMemory never stores your plaintext key.

Rate Limits

Rate limit headers are included in every response:

• X-RateLimit-Limit — your tier's limit
• X-RateLimit-Remaining — remaining requests
• X-RateLimit-Reset — when the window resets

Tenant Isolation

Every request is scoped to your tenant. Your memories, conversations, and episodes are completely isolated — no other tenant can access your data. Vector search is namespace-partitioned and all database queries filter by tenantId.