Devices & Doors API
The BOOQR Hub is our IoT platform for physical access control, door management, and building automation. The Devices API enables hardware integration with the BOOQR platform.
Partner API — Contact Required
The Devices & Doors API is available for hardware partners and system integrators who want to build custom access control solutions on top of the BOOQR platform. Access to this API requires a partnership agreement.
What you can build:
- Custom IoT door controllers with QR/NFC access verification
- Building automation integrations (lighting, climate, ventilation)
- Fleet management for multi-location hardware deployments
- Custom access control hardware with BOOQR booking integration
API capabilities include:
- Device activation and authentication (secure device key provisioning)
- Real-time heartbeat with telemetry and command delivery
- QR/NFC token verification for door access control
- Over-the-air (OTA) firmware updates
- Offline access cache for operation without internet connectivity
- Door state management and automation rules
Contact info@booqr.softwareInclude your use case and expected device volume
Authentication
Devices authenticate using a unique device key (prefixed booqr_dk_) obtained during a secure activation flow. Keys are cryptographically hashed and never stored in plaintext. Each device is scoped to a single tenant for full data isolation.
Security
The Devices API includes enterprise-grade security features:
- Rate limiting — 6 heartbeats per minute per device
- Offline access cache — pre-fetched access grants for 1-hour offline operation
- OTA signature verification — signed firmware updates prevent tampering
- Config encryption — device credentials encrypted at rest
- Hardware watchdog — automatic recovery from device failures
- Audit logging — tamper-evident local + cloud-synced access logs