# Overview
Authentication
Bearer tokens, base URL, rate limits, idempotency and IP allowlists.
Authentication
All requests require a Bearer token in the Authorization header (a few endpoints, like the dedicated server catalog, are public and noted as such below). Generate tokens from your dashboard under Profile → Developer → API token.
bash
curl https://bashrack.com/api/v1/orders \
-H "Authorization: Bearer $BASHRACK_API_TOKEN" \
-H "Content-Type: application/json"Base URL:
Rate limit: 60 requests / minute per token. Burst: 10.
Idempotency:
IP allowlist: if you restrict your token to specific IPs, requests from other IPs get
https://bashrack.com/api/v1Rate limit: 60 requests / minute per token. Burst: 10.
Idempotency:
POST /orders accepts an X-Idempotency-Key header — safe retries replay the first response for 24h.IP allowlist: if you restrict your token to specific IPs, requests from other IPs get
403 ip_not_allowed.