Cloud
Cloud v3 uses a bearer token created from your Presenton account.
Send the token only to the official Cloud API base URL. Store it in a secret manager and rotate it after suspected exposure.
Self-hosted
Self-hosted v1 uses HTTP Basic authentication when an admin account is configured.
MCP uses a bearer session token obtained from the self-hosted authentication endpoint. Credential rotation invalidates existing sessions and MCP tokens.
Never place Cloud tokens, self-hosted passwords, or MCP bearer tokens in source control, client-side code, documentation examples, or support requests.
