API access

OikoHire's external API uses bearer API keys for approved integrations.

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

Keep API keys on the server, never in browser code. Give each integration only the scopes it requires and rotate a key immediately if it is exposed.

The initial external scopes include candidate reading, job reading, AI matching, and AI scoring. Endpoint-level reference pages will be generated from the external OpenAPI contract in a later documentation release.