Axis has two distinct authentication modes designed for different actors in your system. Session tokens (JWTs) are intended for human-facing flows — think frontend dashboards, developer onboarding, and account management UI. API keys are intended for machine-to-machine calls — specifically, the autonomous agents that submit payment intents at runtime. Keeping these two modes separate means your users’ credentials are never exposed inside agent code, and your agents never need to touch a login flow.
Comparison
API keys are wallet-scoped — each key authenticates as a specific wallet, not as a user account. A single user account can own multiple wallets, each with its own independent API key.
Next steps
- Session Auth — sign up, log in, and attach JWTs to frontend requests
- API Keys — use wallet API keys to authenticate agent payment calls