Authentication
Every request to api.chainforge.cn carries a bearer token. There is no unauthenticated path, including health checks that return dataset metadata.
Header
http
Authorization: Bearer cf_live_…
Keys are issued per project. A key can read every live dataset; there is no per-table ACL in beta.
Errors
Missing or malformed tokens return 401. Revoked tokens return 403. Both responses are JSON with an error code and a message, never an HTML page.
BetaKey issuance is currently manual. Request one through the GitHub repository while self-serve is being built.