# Workspace sign-in

Humans use an email link at /login. Open it in the same browser that requested it. Expired links can be resent after the cooldown. Agents use scoped bearer API keys issued by the owner; they cannot bypass owner authentication or advertising approval. A live campaigns:write key can explicitly initiate paid creative generation when enabled.

[Authentication](/docs-markdown/authentication).