User auth
Dashboard pages use Firebase identity tokens for workspace access.
Security
Security guidance for A2EA workspaces.
A2EA separates user login from telemetry authentication. Use dashboard login for users and workspace API keys only from trusted backend or worker environments.
Security model
API keys
Telemetry uses the workspace API key. Keys can be rotated or revoked from API Keys.
Telemetry signing
The SDK signs task event fields before delivery so tampering can be detected.
Recommended deployment
Submit telemetry from backend services, queues, workers, or serverless functions. Avoid public browser submission.