A public API for another system to read and write to your account, with its own keys, read-or-write permissions and a usage limit. Plus signed webhooks that fire the moment something happens.
AVAILABLE ON YOUR PLAN · ACTIVATED ON REQUEST
Each integration with its own key, so you can cut off access without touching the others.
Every key is limited to what it needs to read or write — never full access by default.
A consumption cap per key, so one integration's bug can't take down the rest.
Automatic notifications the moment something relevant happens, signed so you know they came from BOS.
Every endpoint documented, so your team or your vendor can integrate without back-and-forth.
Off by default on every account, turned on one at a time, whenever you need it.