Skip to content

API Authentication Guide

Integrations & API

Connect 100+ tools via browser extensions and native integrations—including Jira, Trello, Asana, Slack, and Notion—to keep work data in sync.

On this page
Updated Jun 20268 min read
APIDevelopers

Authenticate with the Hubnity REST API using API keys and OAuth tokens on Enterprise plans.

API access requirements

REST API access is available on Enterprise plans. Rate limit: 100 requests/minute per API key.

Base URL: https://api.hubnity.eu/v1/

Generate an API key

API keys are tied to the organization. Store securely — they are shown only once.

Generate an API key — overview

A product screenshot will be added here.

  1. 1

    Go to Settings → Integrations → API → API keys

    Step 1 screenshot

    A product screenshot will be added here.

  2. 2

    Click Generate new key

    Step 2 screenshot

    A product screenshot will be added here.

  3. 3

    Name the key (e.g., Reporting sync, HR integration)

    Step 3 screenshot

    A product screenshot will be added here.

  4. 4

    Select scopes (read:timesheets, write:projects, read:members, etc.)

    Step 4 screenshot

    A product screenshot will be added here.

  5. 5

    Copy and store the key securely

    Step 5 screenshot

    A product screenshot will be added here.

  6. 6

    Click Done

    Step 6 screenshot

    A product screenshot will be added here.

Authentication header

Include the API key in every request: Authorization: Bearer YOUR_API_KEY

Example: curl -H 'Authorization: Bearer hbn_xxx' https://api.hubnity.eu/v1/members

OAuth 2.0 (Enterprise)

For third-party apps acting on behalf of users, use OAuth 2.0 authorization code flow.

Register your app from Settings → Integrations → API → OAuth apps. Receive client_id and client_secret.

Token endpoint: POST https://api.hubnity.eu/v1/oauth/token

Rate limits and errors

HUB-API-429: Rate limit exceeded. Retry after Retry-After header value (seconds).

HUB-API-401: Invalid or revoked API key.

HUB-API-403: Insufficient scope for the requested endpoint.

Key rotation

Rotate keys from Settings → Integrations → API → [Key] → Rotate. Old key remains valid for 24 hours.

Revoke compromised keys immediately from the same page.

Was this article helpful?