We trade two values from Turno for a 24-hour bearer JWT. Nothing's stored server-side — your credentials get encrypted into the bearer itself and only decrypted in memory on each API call.
eyJ…
Secret Key now — Turno only shows it once.
We validate your Secret Key with a live GET /v2/userinfo call
before issuing the bearer — you'll see an error here (not a mystery 401 later)
if something's wrong. After this, see the home page for
client wiring snippets.