Field note

What it does

title: "Authentication" description: "Authenticate Tiptap services (AI, Convert, Documents) with JWTs. Reference for claims, signing keys, permissions, and security best practices." canonical url: "https://tiptap.dev/docs/authentication" Authentication Authenticate Tiptap services (AI, Convert, Documents) with JWTs. Reference for claims, signing keys, permissions, and security best practices. Not yet available for on-premises deployments: The authentication model described on this page is currently available on Tiptap Cloud only. If you run Tiptap on-premises, use Legacy authentication instead. We're shipping the new authentication for on-premises deployments in September 2026. Tiptap services use JWTs (JSON Web Tokens) for authentication and authorization. You generate and sign tokens on your server, then pass them to Tiptap services.

Capabilities

Available capabilities

Markdown shortcuts Headless editing ProseMirror integration Images Framework-agnostic API Modular extensions Extension System Task lists Doc Collaboration Custom Extensions Collaborative editing Syntax Highlighting Tables Headless rich-text editor AI-Powered Automation

Tiptap Editor

What it does

Available capabilities

Tags

Ways to use it

Product features

Actions

Asymmetric key pair (ES256) — default

Authentication

Claims reference

Constraints

Cross-service actions

How it works

Other languages

Permissions

Resources

Signing the token

What a token controls