API Credentials

Every request to a BigPanda API includes a Bearer token in the Authorization header. BigPanda accepts two token types. Use a User API Key for new integrations.

User API Key

A User API Key is scoped to a specific user and limited by that user's role permissions. This gives you per-user audit logging and fine-grained access control. User API Keys are required for all current APIs.

To create a User API Key:

In BigPanda, open the User menu and select API Keys.

Create a new key and give it a descriptive name.

Copy the key value. It is shown only once.

For full details, including how to rotate and revoke keys, see the API Key Management documentation.

Keep your keys secure
Store credentials in environment variables or a secret manager. Never commit a key to source control or paste it into shared code. Revoke any key that is no longer used.

Org Token

An Org Token is a single token shared across an organization. It is available only on the inbound Alerts API and a small number of legacy endpoints. To find your Org Token, sign in as an administrator with integrations access and open the Integrations tab — the token appears in the example headers for any Alerts API integration.

Which token to use

Token type	Scope	Use for
User API Key	Per user, role-limited	Most BigPanda APIs and new integrations
Org Token	Organization-wide	Inbound Alerts API and legacy endpoints only

Next steps

Make your first API call: Use your key to send a request.

Authentication and headers: See the full header requirements.

Best practices: Secure and operate your integration.

User API Key#

Org Token#

Which token to use#

Next steps#

User API Key

Org Token

Which token to use

Next steps