gobito.one
ENTR
Create workspace
DocumentationServicesPlatform API
Documentation/Authentication2 / 5

Authentication

Tenant, platform and billing sessions are separate realms. A credential from one realm cannot satisfy another.

Tenant API keys

Use a bearer key issued inside the workspace. Scopes mirror the modules and rights the workspace owns; API access is not a separate paid tier.

bash
curl https://api.gobito.one/v1/cockpit/accounts \
  -H "Authorization: Bearer $GOBITO_KEY"

Billing handoff sessions

A workspace administrator asks the tenant app for a short-lived handoff token. The portal exchanges it for an http-only billing session scoped to one tenant id.

The billing realm has no authority to read tenant business data.

Operator credentials

The operator console uses the platform realm and a distinct issuer. Platform tokens cannot enter a tenant route, and tenant tokens cannot enter control-plane routes.