> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hybridbox.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Hybridbox Public API

> Use the Hybridbox public API to manage accounts, domains, mailboxes, DNS records, forwarding rules, master passwords, tags, workspaces, and dedicated IPs.

# Hybridbox Public API

## Authentication

Authenticate Public API integrations with a Hybridbox service account token. Create a service account in the Hybridbox web app under **Permissions** > **Service accounts**, then copy the plaintext token when it is shown. The token is shown only once, so store it in your secret manager before closing the dialog.

Grant the service account the roles needed for the endpoints your integration will call. Endpoint pages list any additional permissions required. Rotate the token if it is exposed, and revoke the service account when the integration no longer needs access.

Send the service account token as a bearer token on every authenticated REST API request:

```http theme={null}
Authorization: Bearer <service_account_token>
```

Human user OAuth access tokens may still be used for interactive browser or web-app flows, but service account tokens are the recommended credential for unattended integrations and automation.

## OpenAPI specification

Download the complete public API contract as [openapi.json](/openapi.json).