Authentication, scopes, and environments

API keys

• Use x-skila-key for approved server to server v1 requests.
• Each client has explicit scopes, quotas, status, and environment.
• Rotate or revoke a key when access changes or exposure is suspected.

OAuth connections

OAuth is used when an instructor or organization authorizes a provider account. SkilaAI stores encrypted credentials and uses only approved scopes.