Can I use the API without a key?

Yes, all data endpoints (notices, companies, people, directory, statistics) are open without a key. The key is only required for the documented Pro and Enterprise endpoints.

How do I pass my API key?

X-API-Key header with the sk_bodacc_... value, or Authorization with Bearer sk_bodacc_... An invalid or revoked key returns 401.

What should I do on 429?

Respect the Retry-After header of the response before retrying. The quota is 60 requests per minute per IP without a key (600 with a key), plus 10 000 requests per day without a key (100 000 with a key).

Why is pagination bounded?

To prevent full database dumps: limit is capped at 500, offset at 10 000, and the directory at 200 pages of 100. Iterate over offset to browse results.

BODACC API : authentication and limits : BODACC.io

Free public access

The BODACC API is open without a key on all data endpoints: notices, companies, people, directory, statistics. You can query public data immediately:

curl "https://bodacc.io/api/bodacc/annonces?q=boulangerie&limit=5"

Get an API key

Pro and Enterprise plans provide API keys (prefix sk_bodacc_) from your My account → API area (/{locale}/mon-compte/api). The key unlocks the documented endpoints that require it.

Pass the key

Two accepted headers:

# X-API-Key header
curl "https://bodacc.io/api/bodacc/annonces?q=boulangerie" \
  -H "X-API-Key: sk_bodacc_..."

# Or Authorization Bearer
curl "https://bodacc.io/api/bodacc/annonces?q=boulangerie" \
  -H "Authorization: Bearer sk_bodacc_..."

An invalid or revoked key returns 401 with an explicit JSON body. A missing key leaves public access open (no error).

Error codes

Code	Meaning
`400`	Invalid parameter (e.g. unknown directory role)
`401`	Invalid or revoked API key
`404`	Resource not found (notice, SIREN, person)
`429`	Too many requests — respect `Retry-After`

Limits and best practices

Anti-dump bounds: limit ≤ 500, offset ≤ 10 000 on notices/companies/firms; directory bounded to 200 pages of 100
Systematic pagination: iterate over offset (or page/per_page for the directory) instead of requesting large volumes
Retry-After: on 429, wait the indicated duration before retrying
Totals: prefer stats/counts and stats/daily (materialized) over COUNT(*) for dashboards
Real-time data: data is refreshed after each BODACC publication

Go further

Quickstart: first call
Search notices: search parameters
Statistics: counters and series

BODACC API : authentication and limits