> ## Documentation Index
> Fetch the complete documentation index at: https://gb.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

## Machine Authentication - API Key

Use this method to authenticate your application directly to MLink if there is no ability to use MFA or you only require a single data feed.

### **Setting up an API Key**

Request an API Key from [SpiderRock support](https://spiderrock.atlassian.net/servicedesk/customer/portal/3/user/login?destination=portal%2F3), this API Key will be associated with the requestor's SpiderRock ID (username) and scoped to the correct permissions.

### **Using an API Key with MLink Rest**

To authenticate with an API Key to MLink, use an API Key Token formatted as "APIKey".

Example

```
https://mlink-live.nms.saturn.spiderrockconnect.com/rest/json?
apikey=1234-5678-9012-31415
```

### **Using an API Key with MLink WebSockets**

Send an MLinkLogon to MLink servers:

```json theme={null}
msg = {
        "header" : {
                    "mTyp": "MLinkLogon"
                   },
        "message": {
                    "apiKey": "your-api-key"
                   }
      }
```

Include ApiKey as a header in the initial HTTP Handshake request:

```python theme={null}
async with websockets.connect(
      uriJson, extra_headers={"Authorization": f"Bearer {apikey}"},
      ping_timeout=None) as websocket:
```

## Human Authentication

* User Name, Password and an MFA key
* Session Key

Use this method to authenticate your application by allowing humans to log in with their SpiderRock credentials + MFA and access their specific accounts.

You will receive an invite, which will redirect you to our web applications where you can choose your Password and MFA (MLink auth allows for two kinds of MFA: SMS and TOTP).

### **Obtaining a valid Session Key**

Use the SpiderRock Connect ID screens, where the user will be challenged for their SpiderRock ID, password, and an MFA code. After a successful authentication, a Session will be issued to the front end as well as the SpiderRock backend to authenticate the session. This session key can be used with no additional information to gain access to MLink with the permissions assigned to your user until the session key expires.