# Ory Talos Credential Types and Security Model

The credential types, formats, and security model behind Ory Talos.

## Key Concepts

- **Architecture** — editions, deployment shapes, and the design choices that matter when you adopt or operate Talos
- **Credential types** — issued keys, imported keys, derived JWTs, and derived macaroons
- **Token format** — the v1 format for issued API keys
- **Security model** — cryptographic primitives and tenant isolation
- **Caching and consistency** — verification caching and revocation propagation
- **Rate limiting** — per-key rate limit policies and enforcement by edition
- **IP restrictions** — CIDR allowlists that restrict which IPs can use a key