---
title: "EndpointAuthPolicy"
description: "Auth policy applied to incoming requests. Set on the parent `api`
(default for all its endpoints) and optionally overridden per
endpoint. Effective policy = `endpoint.auth ?? api.auth`.

Spec: docs/endpoints.md §6."
section: "Reference"
group: "Types"
order: 85
---

## Definition

```ts
type EndpointAuthPolicy =
  | { kind: "public"; rateLimitPerMinute?: number | undefined }
  | { kind: "workspace_api_key" }
  | { kind: "oauth"; scope: string }
  | { kind: "event_signature"; secretSource: "secret_ref"; secretId: string };
```

## Fields

| Field  | Type                                                              | Notes      |
| ------ | ----------------------------------------------------------------- | ---------- |
| `kind` | `"public" \| "workspace_api_key" \| "oauth" \| "event_signature"` | `required` |