​
Hybridbox Public API

​
Authentication

Authenticate Public API integrations with a Hybridbox service account token. Create a service account in the Hybridbox web app under Permissions > Service accounts, then copy the plaintext token when it is shown. The token is shown only once, so store it in your secret manager before closing the dialog. Grant the service account the roles needed for the endpoints your integration will call. Endpoint pages list any additional permissions required. Rotate the token if it is exposed, and revoke the service account when the integration no longer needs access. Send the service account token as a bearer token on every authenticated REST API request: 
Authorization: Bearer <service_account_token>
Human user OAuth access tokens may still be used for interactive browser or web-app flows, but service account tokens are the recommended credential for unattended integrations and automation.

​
OpenAPI specification

Download the complete public API contract as openapi.json.