Getting Started

Integrate the Bassode API into your application in a few steps.

Step 1: Create a Bassode Account

1. Visit bassode.com/account/register
2. Verify your email address
3. Sign in to your account

Step 2: Activate a Subscription

Creating and managing API keys requires an active subscription. You can start with a free trial.

1. Go to Account → Subscription
2. Choose a plan (Monthly, Yearly, or Lifetime)
3. Activate your subscription or start a trial

Step 3: Generate an API Key

1. Go to Account → API Keys
2. Click "Create New API Key"
3. Give your key a descriptive name
4. Select the scopes your application needs
5. Save both the API Key and API Secret securely — the secret is shown only once

Step 4: Query the Audio Catalog

With a key that has the read:devices scope you can query the audio device catalog immediately — no user login needed:

curl https://api.bassode.com/api/Dac \
  -H "X-Api-Key: bsk_live_xxxxxxxxxxxxxx" \
  -H "X-Api-Secret: your_secret_here"

var client = new HttpClient();
client.DefaultRequestHeaders.Add("X-Api-Key", "bsk_live_xxxxxxxxxxxxxx");
client.DefaultRequestHeaders.Add("X-Api-Secret", "your_secret_here");

var response = await client.GetAsync("https://api.bassode.com/api/Dac");
var content = await response.Content.ReadAsStringAsync();

const response = await fetch('https://api.bassode.com/api/Dac', {
  headers: {
    'X-Api-Key': 'bsk_live_xxxxxxxxxxxxxx',
    'X-Api-Secret': 'your_secret_here'
  }
});
const data = await response.json();

Step 5: Authenticate a User (Optional)

If your application needs user-specific data (API key management, registered devices), authenticate the user first to obtain a JWT:

curl -X POST https://api.bassode.com/api/Users/Login \
  -H "X-Api-Key: bsk_live_xxxxxxxxxxxxxx" \
  -H "X-Api-Secret: your_secret_here" \
  -H "Content-Type: application/json" \
  -d '{"email":"user@example.com","password":"password"}'

Use the returned token as a Bearer token in subsequent requests:

curl https://api.bassode.com/api/ApiKeys \
  -H "X-Api-Key: bsk_live_xxxxxxxxxxxxxx" \
  -H "X-Api-Secret: your_secret_here" \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

Error Handling

Always check the HTTP status code:

Best Practices

• Store credentials in environment variables — never hardcode API keys or secrets
• Store JWTs securely — do not expose them to the browser or log them
• Request minimum scopes — only assign the scopes your application needs
• Handle 403 gracefully — a trial may have expired mid-session; prompt the user to re-login or subscribe
• HTTPS only — all requests must use HTTPS

Next Steps