Secure by default
Never share a TeleBos browser session token with another website. Integration credentials use scoped Bearer API keys.
Developer resources
Use the official OpenAPI reference to discover stable endpoints, request schemas, and response formats. External integrations are intentionally limited to safe, scoped capabilities.
Never share a TeleBos browser session token with another website. Integration credentials use scoped Bearer API keys.
API keys are designed for the minimum access needed. Read-only account and profile capabilities come first.
External endpoints live under /api/public/v1 and are separate from the internal dashboard API.
The TeleBos web app uses a Better Auth session header for first-party requests. That token represents your web session and must not be copied into browser scripts, plugins, or third-party services. Use an integration API key instead when API-key management is enabled for your account.
curl https://your-telebos-domain/api/public/v1/health
# Authenticated requests use a scoped key in the header:
curl https://your-telebos-domain/api/public/v1/accounts \
-H "Authorization: Bearer tb_live_..."