Authentication
Authenticate your product's requests to Beeuni.
Create a client
The SDK reads getToken on each request. Your application owns token storage and refresh.
import { createBeeuni } from '@beeuni/sdk';
const beeuni = createBeeuni({
backendUrl: 'https://api.beeuni.ai/v1',
getToken: async () => process.env.BEEUNI_API_KEY ?? null,
});
const projects = await beeuni.projects.list();Choose a credential
- Use a personal API key for server scripts or CI. Keep it on your server and choose the narrowest scope available.
- Use a service account for an agent or another non-human caller. Assign it the project roles it needs; a new service account has no project access.
- For an application acting on behalf of its users, use Sign in with Beeuni. Its server handler manages OAuth tokens and refresh.
Handle rejected requests
401 means the credential is missing, expired, or invalid. 403 can indicate insufficient permissions or a disabled feature; read the response’s error code before retrying.
If your token getter caches a rotating token, attach invalidate(rejectedToken) to it. The SDK uses that callback before retrying a rejected token once.
Keep credentials private
Do not embed server API keys in browser code, URLs, or logs. Use your server or the OAuth proxy for browser requests. Revoke a compromised credential in Account → Tokens.