Partner authentication
Audience: Partner developer
Objective: Authenticate Partner API calls correctly.
API keys
- Created in Settings → API keys
- Prefix
ops_live_… - Send as:
Authorization: Bearer ops_live_… - Treat like a password; rotate if leaked; never commit to git
Property scope
For multi-property workspaces, send:
X-Baspex-Property-Id: <property-uuid>
Omit only when your integration truly targets the workspace default and the API allows it - prefer explicit property ids.
Session vs partner auth
Browser dashboard uses cookie sessions. Partner integrations should use API keys, not scraped cookies.
Related
- Quickstart
- In-app:
/developers