Authentication - Weevio Cloud

Every PIMS Open API request is authenticated with your tenant's API ID and API Secret, and must identify your tenant with a teamID.

Base URL

All endpoints live under:

https://cloud.weevio.co/tenant/api/pims/v1

Credentials

For new integrations, use HTTPS and HTTP Basic Auth: send an Authorization: Basic <base64(apiID:apiSecret)> header. Both values are validated against your tenant's API settings on every call.

Keep keys on your server. Do not include them in browser code, mobile app bundles, or query strings. URLs can be retained in logs and browser history.

Existing integrations can continue using apiID and apiSecret query parameters where supported. Some existing endpoints also accept body parameters; the new Pending SRO JSON body accepts only its documented intake fields. Use Basic Auth for all new integrations.

A missing or incorrect credential returns 401 Unauthorized.

Note

Your API ID and API Secret are tenant-wide credentials. Keep them secret and rotate them if you suspect they've been exposed.

Required: `teamID`

Every request must include your tenant identifier as a teamID query parameter. Some existing endpoints also accept it in the body. For Pending SROs and SRO reads, always put teamID in the query string. A request with a missing or unknown teamID currently fails with a 500 server error, and the body may not be JSON. Check that teamID is set before you send a request.

Obtaining your API keys

Log into the Weevio Cloud dashboard.
Go to Developer Settings → API Settings.
Select Replace Keys, then Save.
Copy your new API ID and API Secret and store them somewhere safe — the secret is shown to you here.

Example request

curl -s -u 'YOUR_API_ID:YOUR_API_SECRET' \
  'https://cloud.weevio.co/tenant/api/pims/v1/customers/single' \
  --get \
  --data-urlencode 'teamID=<YOUR-TEAM-ID>' \
  --data-urlencode 'customerCode=M-1000'

Authentication errors

Status	When
`401`	The API ID or API Secret is missing or invalid, or no API keys are configured for the tenant.
`500`	The `teamID` parameter is missing or unknown. The body may not be JSON.

Warning

Every authenticated call to a PIMS Open API endpoint is metered and counts toward your monthly request total. See the overview for pricing.