Authentication

All B3OS API requests require authentication via a Bearer token in the Authorization header.

Getting Started

bash
curl api.b3os.org/v1/workflows \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "X-Org-ID: YOUR_ORG_ID"

Organization Context

Most endpoints require an organization context. Pass the X-Org-ID header:

curl api.b3os.org/v1/workflows \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "X-Org-ID: org_abc123"

const response = await fetch("api.b3os.org/v1/workflows", {
  headers: {
    Authorization: "Bearer YOUR_TOKEN",
    "X-Org-ID": "org_abc123",
  },
});

Master Key Pattern

text
Authorization: Bearer MASTER_KEY:USER_ID

This authenticates as a specific user using a server-side master key.

Validating Your Token

To verify your token is valid and see your identity, list your organizations:

bash
curl api.b3os.org/v1/organizations \
  -H "Authorization: Bearer YOUR_TOKEN"

A successful response confirms your token is valid and returns your accessible organizations.

Error Responses