Partner authentication

Audience: Partner developer
Objective: Authenticate Partner API calls correctly.

API keys

  • Created in Settings → API keys
  • Prefix ops_live_…
  • Send as: Authorization: Bearer ops_live_…
  • Treat like a password; rotate if leaked; never commit to git

Property scope

For multi-property workspaces, send:

X-Baspex-Property-Id: <property-uuid>

Omit only when your integration truly targets the workspace default and the API allows it - prefer explicit property ids.

Session vs partner auth

Browser dashboard uses cookie sessions. Partner integrations should use API keys, not scraped cookies.

Related