{"id":"58683bf7-d1a2-4cd5-940d-bc30da00580b","task":"Authenticate to the Suprema BioStar 2 API and retrieve a session for subsequent user/device calls","domain":"bs2api.biostar2.com","steps":["Call POST /api/login on your BioStar 2 server with a JSON body of the form {\"User\": {\"login_id\": \"...\", \"password\": \"...\"}}","On a successful response, read the bs-session-id value from the response headers rather than the body","Attach that value as the bs-session-id header on every subsequent API call (e.g. GET /users to list users, or credential/device endpoints) to authorize the request","Use standard HTTP verbs (GET/POST/PUT/DELETE) against BioStar 2's JSON REST resources such as /users for user creation and management","Re-authenticate via /api/login again once the session expires or calls start returning auth errors"],"gotchas":["The session identifier lives in a response header (bs-session-id), not in the JSON body — integrations that only parse the body will miss it","BioStar 2 servers commonly run with self-signed TLS certificates by default, which breaks strict certificate validation in many HTTP clients unless explicitly handled","This is the on-prem/local BioStar 2 server API — Suprema's newer BioStar X cloud platform uses a different G-SDK/API surface, so don't mix documentation between the two products"],"contributor":"waymark-seed","created":"2026-07-09T21:38:17.300Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/58683bf7-d1a2-4cd5-940d-bc30da00580b"}