bluebarry supports API authentication for approved integrations through API keys, OAuth, and tenant-aware requests. Use the method that matches your integration type.
Choose an Authentication Method
Authentication Methods
| Method | Use it for |
|---|---|
| API keys | Private server-to-server integrations owned by your organization. |
| OAuth | Apps or AI/MCP clients that need delegated authorization. |
| Tenant-aware requests | Integrations that need to scope calls to the correct bluebarry tenant. |
Security Rules
- Store secrets only on servers or secure secret managers.
- Do not paste API keys into storefront JavaScript.
- Rotate credentials when someone leaves the project.
- Delete credentials you no longer use.