Public API

​

What are API Keys?

• Authenticate requests to Tembo’s public API endpoints
• Belong to an organization and inherit that organization’s permissions
• Are secure - generated using cryptographically secure random tokens
• Can be revoked at any time for security

​

Creating API Keys

​

Through the Web Interface

1. Navigate to Settings → API Keys in your Tembo dashboard
2. Click “Create API Key”
3. Copy the generated API key immediately - it won’t be shown again for security reasons
4. Store the API key securely in your application or password manager

​

Key Limits

​

Using API Keys

​

Authentication Methods

​

Bearer Token (Recommended)

curl -H "Authorization: Bearer your_api_key_here" \
  https://api.tembo.io/public-api/task/list

​

Query Parameter

curl "https://api.tembo.io/public-api/task/list?apiKey=your_api_key_here"

​

Available API Endpoints

​

Task Management

• Create Task: POST /public-api/task/create
• List Tasks: GET /public-api/task/list
• Search Tasks: GET /public-api/task/search

​

Repository Management

• List Repositories: GET /public-api/repository/list

​

Creating Tasks via API

curl -X POST https://api.tembo.io/public-api/task/create \
  -H "Authorization: Bearer your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "description": "Fix the login bug in user authentication",
    "json": "{\"priority\": \"high\", \"type\": \"bug\"}",
    "queueRightAway": true,
    "codeRepoIds": ["repo-id-1", "repo-id-2"],
    "branch": "main"
  }'

​

Request Parameters

• description (string, required): A clear description of the task
• json (string, required): Additional task metadata in JSON format
• queueRightAway (boolean, optional): Whether to queue the task immediately (default: false)
• codeRepoIds (array, optional): Array of repository IDs to associate with the task
• branch (string, optional): Target branch for the task

​

Listing Tasks

curl "https://api.tembo.io/public-api/task/list?limit=20&page=1" \
  -H "Authorization: Bearer your_api_key_here"

​

Query Parameters

• limit (number, optional): Number of tasks per page (1-100, default: 10)
• page (number, optional): Page number (default: 1)

​

Searching Tasks

curl "https://api.tembo.io/public-api/task/search?q=authentication&limit=10" \
  -H "Authorization: Bearer your_api_key_here"

​

Query Parameters

• q (string, required): Search query to match against task titles and descriptions
• limit (number, optional): Number of results per page (1-100, default: 10)
• page (number, optional): Page number (default: 1)

​

Managing API Keys

​

Viewing Active Keys

• All active API keys for your organization
• Creation dates for each key
• Truncated key values (first and last 8 characters)
• Key status (Active/Revoked)

​

Revoking API Keys

1. Go to Settings → API Keys
2. Find the key you want to revoke
3. Click the trash icon next to the key
4. Confirm the revocation

​

Security Best Practices

​

Storage

• Never commit API keys to version control
• Use environment variables to store API keys in applications
• Use secure credential management systems in production environments

​

Rotation

• Rotate API keys regularly as part of your security practices
• Create new keys before revoking old ones to prevent service interruptions
• Audit key usage periodically to ensure only necessary keys are active

​

Access Control

• Use separate keys for different applications or environments
• Revoke unused keys immediately
• Monitor API key usage through your application logs

​

Example Integrations

​

Node.js

const TEMBO_API_KEY = process.env.TEMBO_API_KEY;

async function createTask(description, metadata) {
  const response = await fetch('https://api.tembo.io/public-api/task/create', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${TEMBO_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      description,
      json: JSON.stringify(metadata),
      queueRightAway: true,
    }),
  });
  
  return response.json();
}

​

Python

import os
import requests

TEMBO_API_KEY = os.environ.get('TEMBO_API_KEY')

def create_task(description, metadata):
    response = requests.post(
        'https://api.tembo.io/public-api/task/create',
        headers={
            'Authorization': f'Bearer {TEMBO_API_KEY}',
            'Content-Type': 'application/json',
        },
        json={
            'description': description,
            'json': json.dumps(metadata),
            'queueRightAway': True,
        }
    )
    return response.json()

​

cURL Script

#!/bin/bash
TEMBO_API_KEY="your_api_key_here"

create_task() {
  local description="$1"
  local metadata="$2"
  
  curl -X POST https://api.tembo.io/public-api/task/create \
    -H "Authorization: Bearer $TEMBO_API_KEY" \
    -H "Content-Type: application/json" \
    -d "{
      \"description\": \"$description\",
      \"json\": \"$metadata\",
      \"queueRightAway\": true
    }"
}

​

Troubleshooting

​

Common Issues

• Verify your API key is correct and hasn’t been revoked
• Ensure you’re using the correct authentication method
• Check that your organization has access to the API

• Validate your request payload matches the expected format
• Ensure required fields are included
• Check that JSON is properly formatted

• API keys may be subject to rate limiting
• Implement exponential backoff in your applications
• Contact support if you need higher rate limits

​

Getting Help

1. Check the Tembo dashboard to verify your key is active
2. Review the API endpoint documentation
3. Contact support at hi@tembo.io

​

Next Steps

• Set up integrations to connect your repositories
• Learn about pull request automation
• Configure webhooks for real-time updates

​

SDK Coming Soon