List Agents

Authentication

Requests are authenticated with the session cookie set when you sign in (POST /api/auth/login or the dashboard). Browsers send it automatically. A superadmin-only endpoint uses this same cookie — the role is checked server-side, not a separate auth scheme.