> ## Documentation Index
> Fetch the complete documentation index at: https://docs.giftvoucherbrilliance.co.uk/llms.txt
> Use this file to discover all available pages before exploring further.

# Quickstart

> Make your first authenticated request safely.

## 1. Obtain a token

An organisation administrator creates user or service-account access in GVB's **API Access** page. Copy the token when it is issued; it is shown only once. The same page provides a personalised Postman collection containing the correct tenant context and examples.

## 2. List authorised tenants

Choose the server that matches the documentation environment when using the API reference:

| Documentation                      | API server                                                |
| ---------------------------------- | --------------------------------------------------------- |
| `docs.gvb.test`                    | `https://app.gvb.test/api/external/v1`                    |
| `docs.gvb-staging.co.uk`           | `https://app.gvb-staging.co.uk/api/external/v1`           |
| `docs.giftvoucherbrilliance.co.uk` | `https://app.giftvoucherbrilliance.co.uk/api/external/v1` |

The public production example is:

```bash theme={null}
curl --request GET \
  --url https://app.giftvoucherbrilliance.co.uk/api/external/v1/tenants \
  --header 'Accept: application/json' \
  --header 'Authorization: Bearer YOUR_TOKEN'
```

Choose a `tenant_id` from the response for tenant-scoped endpoints. Never put a token in a URL, source-controlled file, support ticket, or analytics property.

## 3. Synchronise incrementally

Store the returned `server_time`. On the next run, pass that value as `updated_since`; follow `next_cursor` until it is `null`. Pages always contain at most 50 records.