Scanner devices
Machine credentials for turnstiles and gate hardware — one-time secrets, IP allowlists, anti-passback, and a scan-only API.
Scanner devices are credentials for machines — turnstiles, gate controllers, integrated access systems — as opposed to the people scanning with the check-in console. You create them under Settings → API keys, in the scanner devices card.
Creating a device
Name it and scope it
Give the device a name you'll recognize in logs ("North turnstile 1").
Lock it down (optional but wise)
- Allowed IPs/CIDRs — the device's secret only works from these addresses; a leaked secret is useless from anywhere else. Editable later without re-minting the secret.
- Anti-passback minutes — the same ticket won't open this gate twice within the window (default 5 minutes; 0 disables; up to 24 hours). This is what stops a re-entry wristband from being passed back through the fence.
Copy the secret — once
The device secret (bk_scan_…) is shown a single time at
creation. Store it in the gate's configuration; Bookitive keeps only a
hash. Lose it → revoke and mint a new one.
Owners and admins are emailed whenever a device is created or revoked — a new door credential is a security event, and the email makes sure it's never a silent one.
What a device can do
Exactly one thing: submit scans for its event via the partner API. No reading orders, no listing tickets, no browsing anything — a compromised gate can't leak your attendee list. Verdicts come back the same as the human console's (valid / already / revoked / not found, with readmit semantics for re-entry modes), and machine scans appear in the same live feed, stats, and attendance analytics as everyone else's.
Anti-passback applies only to machines. A human scanner always sees the full verdict — including readmit — and decides with their eyes; the timer exists for gates that can't look a guest in the face.
Integration notes
The device API is a single endpoint documented in the partner API — one POST with the scanned code, rate-limited generously for gate hardware. Revoking a device cuts it off immediately.