> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cogfoundry.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Configure and protect the server and bearer token used by LoomLoom.

LoomLoom uses a server URL and bearer token. At the current launch stage, authenticated execution and transaction flows are available through ShengSuanYun.

Create or copy a key from the [ShengSuanYun API Keys page](https://console.shengsuanyun.com/user/keys), then configure your shell:

```bash theme={null}
export LOOMLOOM_SERVER="https://loomloom.shengsuanyun.com/loom/v1"
export LOOMLOOM_TOKEN="<your-api-key>"
```

Verify the configuration without printing the token:

```bash theme={null}
loomloom doctor --output json
```

## Credential rules

* Use a token only with the environment and platform that issued it.
* Send a token only over HTTPS and only to the host you explicitly configured.
* Never send a ShengSuanYun token to a CogFoundry host, or a CogFoundry token to a ShengSuanYun host.
* Do not follow a cross-domain redirect while retaining a token.
* Never place a real token in source code, committed `.env` files, documentation, screenshots, logs, or support tickets.
* Prefer `LOOMLOOM_TOKEN` over `--token`; command-line arguments may be retained in shell history or visible to local process inspection.

<Warning>
  CogFoundry payment and transaction capabilities are not currently open. Do not switch a working ShengSuanYun configuration to a CogFoundry host.
</Warning>

## One-command overrides

You can override configuration for one invocation:

```bash theme={null}
loomloom doctor \
  --server "https://loomloom.shengsuanyun.com/loom/v1" \
  --token "<temporary-token>"
```

Use this only in a protected terminal session. See [Environment variables](/developer-reference/loomloom-cli/environment-variables) for precedence and legacy variable names.