Authentication

The BidEngine Project API lets you read and create projects programmatically. Requests are authenticated with two credentials sent as headers.

Credentials

Generate both from your settings page in the BidEngine app.

Header	Credential	Purpose
`apikey`	API key	Identifies your application.
`Authorization`	`Bearer <API key>`	Carries the same key as a bearer token.
`X-API-Secret`	API secret	Scopes the request to your company.

Your API secret scopes every request to your company’s data. Keep it server-side. Do not ship it in a browser bundle, a mobile app, or any client you don’t control — anyone holding it can read and write your projects.

Base URL

https://fqtlkdttexdbenjqgdzg.supabase.co

A minimal authenticated request

curl -X GET "https://fqtlkdttexdbenjqgdzg.supabase.co/rest/v1/project?select=*" \
  -H "apikey: YOUR_API_KEY" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "X-API-Secret: YOUR_API_SECRET"

const res = await fetch(
  'https://fqtlkdttexdbenjqgdzg.supabase.co/rest/v1/project?select=*',
  {
    headers: {
      apikey: process.env.BIDENGINE_API_KEY,
      Authorization: `Bearer ${process.env.BIDENGINE_API_KEY}`,
      'X-API-Secret': process.env.BIDENGINE_API_SECRET,
    },
  }
);

const projects = await res.json();

import os
import requests

response = requests.get(
    "https://fqtlkdttexdbenjqgdzg.supabase.co/rest/v1/project",
    params={"select": "*"},
    headers={
        "apikey": os.environ["BIDENGINE_API_KEY"],
        "Authorization": f"Bearer {os.environ['BIDENGINE_API_KEY']}",
        "X-API-Secret": os.environ["BIDENGINE_API_SECRET"],
    },
)

print(response.json())

Read the credentials from environment variables rather than hardcoding them, as in the examples above. It keeps them out of your version control history.

Troubleshooting

401 Unauthorized

The apikey header is missing or the key is wrong. Confirm you sent the key in both apikey and Authorization: Bearer.

Empty result set instead of an error

A valid key with a missing or incorrect X-API-Secret can return zero rows rather than an explicit error, because the request isn’t scoped to your company. If you expect projects and get [], check X-API-Secret first.

Next steps

Projects

Read and create projects.

⌘I

Getting started

Reports

Proposals

API reference

Credentials

Base URL

A minimal authenticated request

Troubleshooting

Next steps

Projects

​Credentials

​Base URL

​A minimal authenticated request

​Troubleshooting

​Next steps

Projects

Credentials

Base URL

A minimal authenticated request

Troubleshooting

Next steps