Authentication

Authenticate API requests with dashboard-generated API keys.

The B2 Systems API uses bearer API keys.

Authorization: Bearer b2_live_...

API keys are generated in the B2 Systems dashboard by an organization owner. Keys are shown only once when created. Store them securely in your server-side environment or secret manager.

Do not put API keys in browser code, mobile apps, public repositories, logs, or client-side CRM scripts.

Example Request

curl https://api.b2systems.io/v1/usage \
  -H "Authorization: Bearer $B2_API_KEY"

Access Requirements

An API key can only be used when:

  • API access is enabled for the organization.
  • The key has not been deleted.
  • The organization has billing status that allows API usage.
  • The key has the required scope for the endpoint.

If billing is canceled or missing, write requests are blocked and the API returns billing_inactive.

Key Rotation

If a key is exposed or no longer needed, delete it in the dashboard and create a new one.

Deleted keys stop working immediately. B2 Systems keeps backend audit history for traceability, but deleted keys are no longer visible or usable by the organization.


Did this page help you?