Authentication

All Public API endpoints use bearer tokens.

Authorization: Bearer <token>

User JWT bearer tokens

Use a user JWT when a person is acting in the Breezy dashboard, or when an integration must perform user-only actions such as API key management. User tokens can:

call your company’s customer API endpoints
create, reveal, list, and delete API keys
call user-only endpoints such as /users/me

Service API keys

Use a Breezy API key for server-to-server automation.

Authorization: Bearer bzy_live_...

API keys are service credentials scoped to your company. They can call your company’s customer API endpoints, but cannot manage API keys or call user-only endpoints.

Header rules

Send exactly one Authorization bearer token.
Never send API keys in query parameters.