Does the SKY API enforce HTTPS? Is HTTP supported?

Jorge Barajas-Ramirez
Jorge Barajas-Ramirez
in Blackbaud Financial Edge NXT® APIs

Hi all,

I noticed that all documentation examples use an https:// endpoint, but I haven't found an explicit statement confirming whether HTTP requests (http://) are rejected or redirected.

Can someone please confirm:

  • Does the SKY API enforce HTTPS for all requests?
  • Are HTTP calls explicitly blocked or directed?
  • Is there any official documentation or security policy that states this?

I'm specifically looking for assurance that all calls are secure especially when retrieving query results via the URI returned from the Query endpoint.

Thanks in advance for your help!

Comments

  • Alex Wong
    Alex Wong Community All-Star
    Ninth Anniversary Kudos 5 Facilitator 3 Raiser's Edge NXT Fall 2025 Product Update Briefing Badge

    @Jorge BarajasRamirez
    never tested it under HTTP, so don't know for sure, but I do not think it make sense to allow via HTTP.

    @Erik Leaver maybe able to find the doc on this for you

  • Chris Rodgers
    Chris Rodgers Blackbaud Employee
    Ninth Anniversary Kudos 2 Name Dropper Participant

    Hi @Jorge BarajasRamirez, HTTPS is a requirement. Any attempt to access SKY API endpoints or OAuth under HTTP will result in a 404--those resources are not available.

    You can read about our TLS version and cipher requirements in our Security documentation > TLS Requirements.

Categories