REST API v2

Base URL: https://api.bebra.io/v2. All requests require a bearer token created under Settings → API tokens. Tokens are scoped; create one per integration.

Authentication

curl -H "Authorization: Bearer $BEBRA_TOKEN" https://api.bebra.io/v2/workspace

List members

GET /v2/members?limit=100&cursor=...

{
  "members": [
    {"id": "usr_8f2k", "email": "anna@example.com", "role": "editor", "mfa": true}
  ],
  "next_cursor": null
}

Export the audit log

POST /v2/audit/export
{"from": "2026-01-01", "to": "2026-03-31", "format": "jsonl"}

# 202 Accepted; poll the returned job:
GET /v2/audit/export/job_91xk

Rate limits

600 requests/minute per token. Bursts up to 120/second. Responses include X-RateLimit-Remaining; back off on 429 using the Retry-After header.

OpenAPI

The full machine-readable spec is published at https://api.bebra.io/v2/openapi.json and versioned with the API.