Autumn REST API

Create or retrieve your organization's Autumn secret key from the Autumn dashboard. The easiest path is to run `atmn login`, which opens your browser, lets you select an organization, and saves AUTUMN_SECRET_KEY and AUTUMN_PROD_SECRET_KEY to your .env. You can then use that secret key as Authorization: Bearer am_sk_... for API calls and MCP long-lived setups.

Have your backend call `keys.mint` with your Autumn secret key to mint a customer-scoped token pair. Give the returned short-lived access_token (am_jwt_...) to the downstream or self-hosted customer app so it can call customer-scoped Autumn endpoints directly.

Have your backend call `keys.mint` with your Autumn secret key to mint a customer-scoped token pair. Store the returned refresh_token (am_jwt_...) for that customer app and send it as Authorization: Bearer ... to `keys.refresh` when rotating tokens.