> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corsair.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Credentials

> Step-by-step instructions for obtaining an Oura personal access token and webhook secrets for the Corsair Oura plugin.

This guide walks you through obtaining all required credentials for the Oura plugin.

## Authentication Method

The Oura plugin uses API key authentication.

* **[`api_key`](/concepts/api-key)** (default) — Personal access token for the Oura Cloud API

## Personal Access Token

### Step 1: Register an Application

1. Sign in to [Oura Cloud](https://cloud.ouraring.com/) with your Oura account.
2. Open the developer / OAuth section (typically **Personal Access Tokens** or **API Applications** — see [Oura API documentation](https://cloud.ouraring.com/docs/) for the current path).
3. Create a new **personal access token** or OAuth application, following Oura’s steps to generate a token with the scopes you need (sleep, activity, readiness, etc.).

### Step 2: Copy the Token

Copy the token when it is displayed. Treat it like a password.

**Storing credentials:**

```bash theme={null}
pnpm corsair setup --plugin=oura api_key=your-personal-access-token
```

Verify:

```bash theme={null}
pnpm corsair auth --plugin=oura --credentials
```

## Webhook Secret

If you configure Oura webhooks that sign requests, copy the signing secret from Oura’s webhook or subscription settings and store it for verification in Corsair.

```bash theme={null}
pnpm corsair setup --plugin=oura webhook_signature=your-webhook-secret
```

## Required Credentials Summary

| Credential            | Required for                        | Where to find                           |
| --------------------- | ----------------------------------- | --------------------------------------- |
| Personal access token | [`api_key`](/concepts/api-key) auth | Oura Cloud → developer / token settings |
| Webhook secret        | Webhooks (if used)                  | Oura webhook configuration              |

For general information about how Corsair handles authentication, see [Authentication](/concepts/auth).