Security Overview

Knova uses a different mechanism for each direction of communication. Use this table to find the right page.

Direction	What it protects	Mechanism	Page
You call Knova	Core API requests	API key (`x-api-key`) or bearer token (JWT)	API Authentication
Knova calls you	Webhook notifications	Signature (`x-signature`) and optional shared secret (`x-api-key`)	Webhook Security
Knova calls your connector	Self-serve connector requests	Bearer token	Connector Authentication
Your connector calls Knova	Connector events	Signed events	Connector Authentication

Knova is deployed on your infrastructure, so credentials and keys are provisioned per deployment. Ask your Knova contact how they're issued for your environment.