Bono API Authentication

Bearer tokens with scoped permissions

Authenticate with Authorization: Bearer bono_live_… or X-API-Key. A key can use the scopes on the key that are approved for the account and inside a module Bono enabled: Core (profile:read, pages:read, credits:read), Content (posts:*, generate:blog/linkedin/twitter, content:*), Creative (creative:write, generate:carousel/video), Socials (socials:*, publish:linkedin/twitter/instagram/facebook/threads), Training (training:read/write/ingest), Brand (brand:*), Newsletter (newsletter:*, subscribers:write), and Webhooks (webhooks:manage).

Rate limits, channel quotas, and errors

Per-key rate limits: 60 rpm for reads, 20 for writes, 10 for generation, 5 for publishing, 10 for training data, 2 for newsletter sends, 30 for webhooks. Each profile also has a daily API publish limit per channel (LinkedIn 10, X 25, Instagram 10, Facebook 10, Threads 25, newsletter 1 by default) with a 5-minute gap between posts. Errors return error.code and error.message; common codes include missing_scope, module_disabled, plan_required, insufficient_credits, api_credit_cap_reached, rate_limited, and channel_quota_exceeded.