# `AgentDbWeb.AuthPlug`
[🔗](https://github.com/manhvu/agent_db/blob/v0.1.0/lib/agent_db_web/auth_plug.ex#L1)

Optional bearer-token authentication for the API.

Off by default, and the surface it guards is unauthenticated by design when
it is off: it exposes document and memory content, session identifiers and
model state, so the listener binds loopback unless a deployment asks for
more. Turning this on is a separate decision from reaching the port at all.

---

*Consult [api-reference.md](api-reference.md) for complete listing*