---
title: Authentication
description: Authenticate Research Agent requests and confirm access to your assigned agent.
sidebar:
  icon: key
  hidden: true
---

Research Agent uses bearer authentication. Every request must include a SIBI API token in the `Authorization` header.

```http
Authorization: Bearer YOUR_ACCESS_TOKEN
```

## Get access

Research Agent is available to approved customers. Before integrating, you need:

- a SIBI API token from the [SIBI Developer Portal](https://developer.sibipro.com/)
- the `agentId` assigned to your organization

Your token must have permission to use that agent. A valid token without access to the requested `agentId` receives `403 Forbidden`.

> **Keep tokens on the server**
>
> Never expose an API token in browser code, mobile apps, client-side logs, or source control. Store it in your server-side secret manager and send requests from a trusted backend.

## Test authentication

Creating a task is the first authenticated request in the Research Agent flow:

```bash
curl --request POST \
  "https://agents.sibi.ai/api/agents/<AGENT_ID>/tasks/create" \
  --header "Authorization: Bearer <YOUR_ACCESS_TOKEN>" \
  --header "Content-Type: application/json" \
  --data '{"message":"GE GTS18GTHWW"}'
```

A successful request returns `202 Accepted` and a task to poll:

```json
{
  "status": "pending",
  "taskId": "<TASK_ID>",
  "statusUrl": "https://agents.sibi.ai/api/agents/<AGENT_ID>/tasks/<TASK_ID>"
}
```

If the token is missing, malformed, or invalid, the API returns:

```json
{
  "error": "Unauthorized"
}
```

**[Continue to the quickstart](/research-agent/quickstart)**

Create a task, poll its status, and inspect a result.