API Keys & Permissions

Generate and manage scoped API keys, enforce least privilege, and rotate cryptographic tokens.

Managing API Keys

Bunnylynk API keys use high-entropy strings prefixed with environment markers:

  • blyk_live_...: Production environment keys.
  • blyk_test_...: Sandbox / staging keys.

API Key Scopes

Keys can be restricted to specific functional scopes to follow the principle of least privilege:

ScopeCapability
events:readRead event logs, status, and delivery attempts.
events:writeIngest webhooks and trigger manual replays.
sources:*Create, modify, and delete Sources.
destinations:*Create, modify, and delete Destinations.
connections:*Configure connections, rules, and retry policies.
adminFull workspace administration, member invites, and key rotation.

Authenticating Requests

Include your API key as a Bearer token in the Authorization header:

curl -X GET https://api.bunnylynk.com/v1/sources \
  -H "Authorization: Bearer blyk_live_xxxxxxxxxxxxxxxxxxxx"

Next: Review Role-Based Access Control (RBAC).