Every district has tools around its platform: the city’s community app, a local news site, a data warehouse, a digital-signage vendor. Historically they’ve been fed by nightly CSV jobs someone maintains, or worse — by scraping.
The new Bloomz Partner API gives districts a first-class way to let those tools read Bloomz — with the district holding every key.
Credentials the district issues itself
A district admin registers a partner app, picks its read scopes — posts, events, documents, athletics — and hands over a token that’s shown exactly once. The partner endpoints reuse the same handlers and serializers as Bloomz’s own public web surface, so a partner can never see more than the public web view does.
Three properties a tech director can sign off on:
- Read-only by construction. Write scopes don’t exist in the product, so they can’t be misconfigured into existence.
- One-click rotation. Rotate a signing secret and the old one is invalid immediately.
- Audited end to end. Registration, rotation, disable — who and when, every time.
Webhooks that behave like the best in the industry
Five catalog events — content shared to the public web, athletics scores posted, dismissal transitions, visitor check-ins — deliver as signed payloads your partner verifies with standard HMAC discipline, the same way they’d verify Stripe’s. Failures retry on a bounded backoff schedule, dead-letter after five attempts, and every attempt is inspectable in the delivery log.
The scoreboard in the town coffee shop can show Friday’s final minutes after the coach enters it. The city app can carry the district’s public announcements the moment they publish. No cron job, no CSV, no scraping.
Why this matters beyond integrations
K-12 platforms have historically been closed: data goes in from the SIS, and nothing comes out except reports. That’s a quiet tax on every district’s other investments. Bloomz now runs the whole school day on one record — and the Partner API is the acknowledgment that the record is yours, and the tools you choose should be able to read it, safely.
The Partner API is new for 2026-27, off by default, and enabled per district. Details and the full 2026-27 release are at bloomz.com/whats-new-2026.