Overview
ScaleHouse Systems uses Supabase Auth for secure authentication. This guide covers how authentication works for both users and API access.
User Authentication
Sign Up
Enter Email
Provide your email address and create a password.
Verify Email
Check your email and click the verification link.
Complete Profile
Fill in your name and organization details.
Sign In
Enter Credentials
Enter your email and password.
Access Dashboard
You’ll be redirected to your dashboard upon successful login.
Password Reset
Click Forgot Password
On the login page, click “Forgot Password”.
Enter Email
Provide your email address.
Check Email
You’ll receive a password reset link.
Set New Password
Click the link and enter your new password.
API Authentication
API Keys
API keys are used for programmatic access to the ScaleHouse API.
API keys are scoped to your organization and can be revoked at any time.
Generating API Keys
Navigate to Settings
Go to Settings → API Keys in your dashboard.
Create Key
Click “Create API Key” and give it a name.
Copy Key
Copy the API key immediately - it won’t be shown again.
Store Securely
Store the key in a secure location (password manager, environment variables).
Using API Keys
Include your API key in the Authorization header:
curl -H "Authorization: Bearer YOUR_API_KEY" \
https://api.scalehousesystems.com/v1/connectors
Connector Authentication
Connectors use a different authentication flow:
Generate Activation Token
In the dashboard, go to Audit Intelligence → Connectors and click “Activate Connector”.
Copy Token
Copy the activation token (valid for 15 minutes).
Activate in Connector
Paste the token into the connector configuration window.
Receive API Key
The connector receives a permanent API key for ongoing authentication.
Security Best Practices
Use Strong Passwords
Use a password manager to generate and store strong, unique passwords.
Enable MFA
Enable multi-factor authentication for additional security.
Rotate API Keys
Regularly rotate API keys, especially if they may have been compromised.
Use Environment Variables
Never hardcode API keys in your code. Use environment variables instead.
Session Management
Sessions are managed automatically by Supabase Auth. Sessions expire after 7 days of inactivity or can be manually revoked.
If you suspect your account has been compromised, immediately change your password and revoke all API keys.
Next Steps
