REST API v2
Base URL: https://api.bebra.io/v2. All requests require a bearer token created under Settings → API tokens. Tokens are scoped; create one per integration.
Authentication
curl -H "Authorization: Bearer $BEBRA_TOKEN" https://api.bebra.io/v2/workspace
List members
GET /v2/members?limit=100&cursor=...
{
"members": [
{"id": "usr_8f2k", "email": "anna@example.com", "role": "editor", "mfa": true}
],
"next_cursor": null
}
Export the audit log
POST /v2/audit/export
{"from": "2026-01-01", "to": "2026-03-31", "format": "jsonl"}
# 202 Accepted; poll the returned job:
GET /v2/audit/export/job_91xk
Rate limits
600 requests/minute per token. Bursts up to 120/second. Responses include X-RateLimit-Remaining; back off on 429 using the Retry-After header.
OpenAPI
The full machine-readable spec is published at https://api.bebra.io/v2/openapi.json and versioned with the API.