# Getting started

## Run locally

```bash
python -m venv .venv
# Windows
.\.venv\Scripts\activate
# macOS / Linux
# source .venv/bin/activate

pip install -r requirements.txt
pip install -r docs/requirements.txt

uvicorn app.main:app --reload --port 8000
```

- Swagger UI: `http://localhost:8000/docs`
- ReDoc: `http://localhost:8000/redoc`

## Making requests

All requests use the dual-token model:

- `X-Kumiho-Token`: service token (tenant scoped)
- `Authorization: Bearer <firebase-id-token>`: viewer identity

Example:

```bash
curl -X GET "http://localhost:8000/api/v1/projects" \
  -H "X-Kumiho-Token: <service-token>" \
  -H "Authorization: Bearer <firebase-id-token>"
```