From ac7b20c7e158237fd533146beacf4863a04cc902 Mon Sep 17 00:00:00 2001
From: Mark Kunzmann <mark.kunzmann@adintegra.com>
Date: Fri, 29 Aug 2025 18:34:24 +0200
Subject: [PATCH] docs: Update for PK

---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index 14f2e48..dab6d12 100644
--- a/README.md
+++ b/README.md
@@ -27,6 +27,14 @@ The API endpoints and request / response types are designed to be compatible wit
 
 Authorization is done via Bearer tokens using [Biscuit](https://www.biscuitsec.org/) - a cryptographically secured authorization token format.
 
+#### Configuring your Private Key
+
+Ensure your runtime environment defines an environment variable `BISCUIT_PRIVATE_KEY` containing your private key. **Note:** The key string must be prefixed by the encryption algorithm, e.g.
+
+```
+BISCUIT_PRIVATE_KEY=ed25519-private/my-super-secret-key
+```
+
 #### Token Format
 
 Tokens are passed in the `Authorization` header as Bearer tokens.
-- 
2.51.2