Authentication

The Pricing API accepts one of two credentials. Send one per request.

Credential	Header	Use it for
API key (`bl_...`)	`X-API-KEY: <key>`	Scripts and servers you run
OAuth access token	`Authorization: Bearer <token>`	Apps that sign people in with CostGraph

If a request carries both, the API returns 400 with Send either an API key or an access token, not both.

Permissions

Both credentials carry permissions named pricing:read and pricing:write.

Permission	Allows
`pricing:read`	Read the catalog, quotes, recommendations, and the prices assigned to your tenant’s resources
`pricing:write`	Add custom and on-prem prices, and assign prices to VMs and disks

Changes with pricing:write also need an admin role. A request without the required permission returns 403 with code permission_denied.

Get an API key

Create an API key at app.costgraph.ai and set its permissions when you create it.

Get an access token

Register an app and sign people in as described in Sign in with CostGraph. Request pricing:read, pricing:write, or both in the scope parameter, then send the access token as a bearer token.

curl -H "Authorization: Bearer $ACCESS_TOKEN" \
     https://pricing.baselinehq.cloud/v1/marketplace/compute

Authenticate with the SDK

The SDK examples send an API key.

Go
TypeScript

import (
    "os"

    openapiclient "github.com/baselinehq/pricingapi-client-golang"
)

token := os.Getenv("COSTGRAPH_API_KEY")

configuration := openapiclient.NewConfiguration()
configuration.DefaultHeader["X-API-KEY"] = token

client := openapiclient.NewAPIClient(configuration)

import { DefaultApi, Configuration } from '@baselinehq/pricingapi-client-typescript';

const token = process.env.COSTGRAPH_API_KEY;

const config = new Configuration({
  basePath: 'https://pricing.baselinehq.cloud',
  apiKey: (name: string) => (name === 'X-API-Key' ? token : undefined),
});

const client = new DefaultApi(config);

Raw HTTP

Include your API key in the X-API-KEY header:

curl -H "X-API-KEY: $COSTGRAPH_API_KEY" \
     -H "Content-Type: application/json" \
     -X POST https://pricing.baselinehq.cloud/v1/pricing/compute \
     -d '{"instance_type": "s-2vcpu-2gb", "provider": "digitalocean", "region": "nyc1", "service": "Droplet", "usage_type": "ondemand", "operating_system": "linux", "vm": {"cpu_cores": 2, "ram_gb": 2}}'

An invalid key returns a 401 problem document with code unauthenticated. On /v1, every error is an RFC 9457 problem document; see Errors.

Getting Started

SDKs

Pricing

Marketplace

Errors

Other

Changelog

Permissions

Get an API key

Get an access token

Authenticate with the SDK

Raw HTTP

​Permissions

​Get an API key

​Get an access token

​Authenticate with the SDK

​Raw HTTP

Permissions

Get an API key

Get an access token

Authenticate with the SDK

Raw HTTP