# Postman & Insomnia

> Import EntryBit's OpenAPI spec into Postman or Insomnia for a ready-made collection of every endpoint — with request schemas, examples, and OAuth 2.0 / API-key auth pre-wired.

The fastest way to explore the API without writing code: import the [OpenAPI spec](/docs/api-reference/openapi/) into Postman or Insomnia and you get a collection of **every endpoint**, complete with request/response schemas and examples.

## Import into Postman

1. **Import** → **Link**, and paste `https://entrybit.net/openapi.json` (or download the file and drop it in).
2. Postman builds a collection with a folder per tag and a request per endpoint.
3. Set up auth on the collection so every request inherits it (below).

## Import into Insomnia

**Create** → **Import From URL** → `https://entrybit.net/openapi.json`. Insomnia generates a request for each endpoint; set the auth on the base environment.

## Authentication in Postman

### Sign in with EntryBit (OAuth 2.0)

On the collection's **Authorization** tab, choose **OAuth 2.0** and configure:

| Field | Value |
| --- | --- |
| Grant type | Authorization Code (With PKCE) |
| Auth URL | `https://entrybit.net/api/oauth/authorize` |
| Access Token URL | `https://entrybit.net/api/oauth/token` |
| Client ID | your `client_id` (from [Register an app](/docs/oauth/register-an-app/)) |
| Code Challenge Method | SHA-256 |
| Scope | `openid profile email offline_access passes:read passes:write invites:read` |
| Callback URL | a redirect URI you registered for the client |

Click **Get New Access Token**, complete sign-in in the popup, then **Use Token**. Postman refreshes it for you.

### Organization API key

For the [organization endpoints](/docs/api-reference/organization/), choose **Bearer Token** and paste your `eb_sk_…` key. (Create one under [Manage API keys](/docs/api-keys/create-and-manage/).) Treat the collection as a secret — an API key is a server credential.

## Keep it in sync

The spec is versioned and always current at `https://entrybit.net/openapi.json` — re-import (or use Postman's "Sync" for an API) whenever you want the latest endpoints.