API

Authentication

Create an Outpost key in Settings. The secret is shown once. Send it in the Authorization header on each /v1 call.

Authorization: Bearer op_…

What a key can do

• Read. Open an environment, its listeners, caught events, and the catalog.
• Manage. Change listeners and automations, edit a definition, and replay an event.

An agency admin can create a key for every environment on the account. A manage key of that reach can also add an organisation and send an invite.

Webhooks

Register the listener URL in Bluestone PIM. Bluestone signs the body with the listener secret. That call is separate from /v1.