Partner FOB Cost API
Lets external partners query a reference cost without giving them access to any internal system.
The problem
External partners needed the reference cost, but giving them access to internal infrastructure was a security non-starter.
What I did
On top of my FOB cost predictor's infrastructure, I designed the public facade: a decoupled read model (matrix precomputed by an internal process), per-partner API-key auth, rate limiting and zero BSG credentials on the partner side. Security by design.
The outcome
Design complete, delivering only aggregated reference values — the ecosystem's public-API pattern.
How it exposes the data and nothing else
- Partner requestInput: no VPN
- Per-partner API keyOne per consumer
- Rate limitingPer key
- Decoupled read modelPrecomputed matrix
- Aggregated values onlyNever the individual record
- Response with no internal credentialsOutput
The partner needs a number; granting access to internal infrastructure to get it was unacceptable. The answer is a decoupled read model: the partner queries a precomputed matrix and never touches an internal system or a corporate credential.
Stack
- Python
- FastAPI
- Pydantic
- Supabase
- Docker
Blue Star Group internal project — the code is not public.
Next project: RPA at scale — WF Consulting →