The Tento API uses API tokens to authenticate requests. All API requests must include your partner API token in the request header.
Getting Your API Token
Partner API tokens are issued through the Volt platform. Once your partner account has been set up by the Tento team:
-
Log in to Volt with your partner credentials
-
Navigate to API Tokens
In the partner sidebar, open API Tokens (visible to partner admins), then Create New Token.
-
Generate a new token and store it securely — it will only be displayed once
If you don't have a partner account yet, fill out our partner integration form.
Making Authenticated Requests
Include your API token in the x-api-key header on every request:
curl https://api.tento.co/bcm/insights/{businessPublicId} \
-H "x-api-key: YOUR_API_TOKEN"Token Permissions
Tokens are scoped to your partner account and only grant access to data for businesses referred through your integration. You cannot access data for businesses referred by other partners or created directly in Tento.
| Permission | Description |
|---|---|
read-bcm-score | Access business credit scores and insights |
send-bcm-application | Submit BCM applications |
read-loan-application-status | Access financing application status |
send-loan-application | Submit financing applications |
Error Responses
| Status | Meaning |
|---|---|
401 | Invalid or missing API token |
403 | Valid token, but not permitted for this specific resource (e.g. an application belonging to another partner) |
404 | Business not found or not referred by your partner account |
Security Best Practices
- Never expose your API token in client-side code or public repositories
- Rotate tokens periodically via Volt
- Use separate tokens for staging and production environments
Staging vs. Production
| Environment | Base URL |
|---|---|
| Staging | https://api-staging.tento.com |
| Production | https://api.tento.com |
Contact the Tento team to receive a staging API token and test business IDs. Access to Volt on staging is not available.