Skip to content
Backspin

Authentication

Send your key in the Authorization header, and only there:

GET /v1/jobs HTTP/1.1
Host: app.backspin.io
Authorization: Bearer bsk_live_…
  • Keys are bsk_live_ followed by 43 letters and digits. Backspin stores only a hash, so a lost key can’t be shown again: revoke it and create another.
  • Keys are read-only and belong to one board. Create and revoke them on the API keys page at app.backspin.io/keys.
  • A revoked key stops working within a minute.
  • Keys in the query string are ignored, and a dashboard session cookie doesn’t work on /v1.
  • A missing, malformed, unknown or revoked key gets the same 401.