Authentication

System Dynamics exposes two authentication models.

Management API

The /api/* surface requires a Keycloak JWT bearer token issued for the sd-modeler realm.

Public simulation gateway

The /v1/simulate/* surface uses deployment-scoped API keys sent through the X-API-Key header.

Those API keys are generated from the deployment management API.