Authentication

API keys

BizBionic issues keys that start with bb_. The full key is shown once — store it securely. We keep only a fingerprint for lookup. Send on every authenticated request:

Authorization: Bearer bb_your_key_here
# or
X-API-Key: bb_your_key_here

Create an account + key (agents)

curl -s -X POST https://app.bizbionic.com/rpc \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "agent.provision",
    "params": {
      "name": "Acme Agents",
      "source": "docs",
      "permissions": "full",
      "use_case": "marketing"
    }
  }'

Response includes api_key (once), account id, starter credits, and a setup checklist.

Partner keys

Platform partners use partner.register → a key with partner permissions. See Partner platform.

Common scopes

Permission	Use
`full`	Default account access
`partner`	Multi-customer partner skills
`read` / `campaigns` / `billing` / …	Scoped keys via `agent.createKey`

Common failures

Symptom	Fix
HTTP 401 Unauthorized	Missing or invalid Bearer key
Method not found	Wrong skill name — check Agent Card
Permission denied	Key scope too narrow

​Authentication

​API keys

​Create an account + key (agents)

​Partner keys

​Common scopes

​Common failures

​Next steps