Skip to main content
Bunker Longevity authenticates every API call with a bearer token. You get one from your account and pass it in the Authorization header of each request.

​
Get an API key

1

Open account settings

Sign in at bunkerbio.com and open the API keys section of your account settings.
2

Create a new key

Give the key a descriptive name (for example, prod-genoscan) so you can identify it later. Keys are shown once at creation; copy the value immediately.
3

Store the key securely

Save the key in a secret manager or an environment variable. Never commit it to source control.

​
Authenticate a request

Pass your key as a bearer token on every request:
All Bunker Longevity endpoints require authentication. Unauthenticated requests return 401 Unauthorized.

​
Scopes

Each key carries a scope that limits what it can do: Give production workloads the narrowest scope they need.

​
Rotate a key

Rotating a key immediately invalidates the old value. Deploy the new key to every environment before revoking the old one.
1

Create a replacement key

Generate a new key with the same scope.
2

Roll out the new key

Update your secrets in every environment that uses the old key.
3

Revoke the old key

Delete the old key from account settings. Any request still using it will fail with 401.

​
Common auth errors