Getting Started

Authentication

Authenticate requests to the Boring Project API using Bearer tokens with your API key.

API Key Format

All API requests require authentication using an API key in the Authorization header. API keys use the Bearer scheme and are prefixed with bp_live_ followed by 32 alphanumeric characters (40 characters total).

GET/users
curl https://apply-api.boringproject.ai/api/v1/users \
  -H "Authorization: Bearer bp_live_abc123def456ghi789jkl012mno345pqr678stu901"

Security Best Practices

Always use HTTPS for all API requests. Never expose API keys in client-side code or commit them to version control. Rotate API keys periodically via the dashboard. Use IP whitelisting for additional security when available on your plan.

Never share your API key publicly. If a key is compromised, revoke it immediately from the dashboard and generate a new one.