Skip to main content

API keys

Manage the keys used to authenticate API requests. Keys are Pro+ and scoped to links:read, links:write, analytics:read. Create them in Settings → API Keys or via the API below (cookie-authenticated dashboard session).

Create a key

POST /api/api-keys
{ "name": "ci-bot", "permissions": ["links:read", "links:write"] }

Response includes the full key once (store it now):

{ "id": "…", "name": "ci-bot", "prefix": "a1b2c3d4", "permissions": ["links:read","links:write"], "key": "ll_live_…", "revoked": false }

List keys

GET /api/api-keys

Returns metadata only (never the secret).

Revoke a key

DELETE /api/api-keys/{key_id}

A revoked key immediately stops authenticating. Keys are rate-limited to 100 req/min.