Skip to main content

Authenticating with the Bitrise API

The current API supports two types of authentication:

  • User-generated personal access tokens.
  • Workspace API tokens.

Every API endpoint requires authentication, except the “root” URL (https://api.bitrise.io).

  1. Create either a personal access token or a Workspace API token.

  2. Save it in a secure way.

  3. Add an Authorization header with the access token to your API calls.

    For example, the following call retrieves a list of apps you or your Workspace has access to:

    curl -X 'GET' \
    'https://api.bitrise.io/v0.1/apps' \
    -H 'Authorization: <ACCESS-TOKEN>'
    -H 'accept: application/json'