Authentication - Bonai Docs

The Bonai News API authenticates every request with an API key. Keys are product-scoped: a Bonai News API key works only with the Bonai News API.

Get an API key

Sign in to the Bonai console.
Select the Bonai News API product workspace.
Open API Keys and create a new key.
Copy the key (bk_...). It is shown only once.

Authenticate requests

Send your key in the api-key header on every request:

curl --request GET \
  --url "https://api.bonai.io/news/search/articles?query=technology" \
  --header "api-key: YOUR_API_KEY"

Other languages

import requests

resp = requests.get(
    "https://api.bonai.io/news/search/articles",
    params={"query": "technology"},
    headers={"api-key": "YOUR_API_KEY"},
)
print(resp.json())

const resp = await fetch(
  "https://api.bonai.io/news/search/articles?query=technology",
  { headers: { "api-key": "YOUR_API_KEY" } }
);
console.log(await resp.json());

Public endpoints

The GET /ping endpoint is public and does not require an API key:

curl --request GET \
  --url "https://api.bonai.io/news/ping"

Managing keys

Revoke: revoke a key from the API Keys page if it’s compromised or no longer needed. Revocation is immediate.
Rotate: create a new key, update your applications, then revoke the old one.

Never share your API key or commit it to source control. Use environment variables or a secret manager in production.