Cookie auth for web sessions, Bearer token for API keys. Consistent error schema across all endpoints. Rate-limited per tier.
https://api.chartai.livehttps://api.test.chartai.livehttp://localhost:8001Cookie: session=...Set after POST /auth/loginAuthorization: Bearer sk-...Pro plan API keys onlyRate limit headers: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset
Pro plan required for scan API. Free plan has public endpoints.