Getting Your API Token

Partner API tokens are issued through the Volt platform. Once your partner account has been set up by the Tento team:

Log in to Volt with your partner credentials
Navigate to API Tokens

In the partner sidebar, open API Tokens (visible to partner admins), then Create New Token.
Generate a new token and store it securely — it will only be displayed once

If you don't have a partner account yet, fill out our partner integration form.

Making Authenticated Requests

Include your API token in the x-api-key header on every request:

curl https://api.tento.co/bcm/insights/{businessPublicId} \
  -H "x-api-key: YOUR_API_TOKEN"

Token Permissions

Tokens are scoped to your partner account and only grant access to data for businesses referred through your integration. You cannot access data for businesses referred by other partners or created directly in Tento.

Permission	Description
`read-bcm-score`	Access business credit scores and insights
`send-bcm-application`	Submit BCM applications
`read-loan-application-status`	Access financing application status
`send-loan-application`	Submit financing applications

Error Responses

Status	Meaning
`401`	Invalid or missing API token
`403`	Valid token, but not permitted for this specific resource (e.g. an application belonging to another partner)
`404`	Business not found or not referred by your partner account

Security Best Practices

Never expose your API token in client-side code or public repositories
Rotate tokens periodically via Volt
Use separate tokens for staging and production environments

Staging vs. Production

Environment	Base URL
Staging	`https://backend-stage.tento.co/partner-api/proxy/`
Production	`https://api.tento.co`

Contact the Tento team to receive a staging token and test business IDs.