Getting Started

Authentication

Authenticate requests to the Boring Project API using Bearer tokens with your API key.

API Key Format

Every API request must include an API key in the Authorization header using the Bearer scheme. Keys are prefixed with bp_live_ followed by 32 alphanumeric characters (40 characters total).

GET/users
curl https://apply-api.boringproject.ai/api/v1/users \
  -H "Authorization: Bearer bp_live_abc123def456ghi789jkl012mno345pqr678stu901"

Security Best Practices

Use HTTPS for all API requests. Never expose API keys in client-side code or commit them to version control. Rotate keys periodically through the dashboard, and enable IP whitelisting for additional security when available on your plan.

If an API key is compromised, revoke it immediately from the dashboard and generate a new one.