Guides
Authentication
Credentials
Every request carries a Bearer credential: bm_test_… for sandbox, bm_live_… for production, or a short-lived OAuth access token. Secrets are hash-at-rest and revealed once at mint or rotate.
Scopes
Credentials carry least-privilege scopes like invoices:write or sign:envelopes:create. A call outside the granted scopes returns 403 scope_denied.
Environments
Sandbox and production are isolated — keys, webhooks, usage and data never cross environments. Production credentials mint only after platform review.
Rate limit
120 requests per minute per IP at the gateway. Excess returns 429 rate_limited with a retry window.