Bot API

Authentication

Bot integrations authenticate like normal RebelOps users: sign in with email/password, obtain a Master server access token, and send it as a bearer token to organization API endpoints.

Step 1: Sign In and Retrieve Master Server Access Token

Send an email/password authentication request to /auth/v1/token?grant_type=password, and grab the access token from the access_token field in the response.

curl -X POST "https://auth.rebelops.app/auth/v1/token?grant_type=password" \
  -H "apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imt0d2FkcmtraGF4ZnF5bmJ3aXJkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NDk2Mjk5NzgsImV4cCI6MjA2NTIwNTk3OH0.urppeLRkk738LINWlEi_NYiStEIR9uy74UdeH1sjROI" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "bot.account@example.com",
    "password": "your-bot-password"
  }'

const response = await fetch(
  "https://auth.rebelops.app/auth/v1/token?grant_type=password",
  {
    method: "POST",
    headers: {
      "apikey": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imt0d2FkcmtraGF4ZnF5bmJ3aXJkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NDk2Mjk5NzgsImV4cCI6MjA2NTIwNTk3OH0.urppeLRkk738LINWlEi_NYiStEIR9uy74UdeH1sjROI",
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      email: "bot.account@example.com",
      password: "your-bot-password"
    })
  }
)

const authData = await response.json()
const accessToken = authData.access_token

import requests

response = requests.post(
    "https://auth.rebelops.app/auth/v1/token?grant_type=password",
    headers={
        "apikey": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imt0d2FkcmtraGF4ZnF5bmJ3aXJkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NDk2Mjk5NzgsImV4cCI6MjA2NTIwNTk3OH0.urppeLRkk738LINWlEi_NYiStEIR9uy74UdeH1sjROI",
        "Content-Type": "application/json",
    },
    json={
        "email": "bot.account@example.com",
        "password": "your-bot-password",
    },
)

auth_data = response.json()
access_token = auth_data["access_token"]

Step 2: Use Bearer Token in Organization API Call

Once authenticated, the bot can call organization endpoints the same way the app does. Example: list projects from an organization.

curl -X GET "https://<organization-url>/api/projects" \
  -H "Authorization: Bearer <access_token>" \
  -H "Content-Type: application/json"

const response = await fetch("https://<organization-url>/api/projects", {
  method: "GET",
  headers: {
    "Authorization": "Bearer <access_token>",
    "Content-Type": "application/json"
  }
})

const projectsData = await response.json()

import requests

response = requests.get(
    "https://<organization-url>/api/projects",
    headers={
        "Authorization": "Bearer <access_token>",
        "Content-Type": "application/json",
    },
)

projects_data = response.json()

The organization-url has to be replaced with your actual RebelOps organization URL, which can be found in the address bar when you are logged in to the web app or in the Organization screen of Organization settings.