API keys
Manage the keys used to authenticate API requests. Keys are Pro+ and scoped to
links:read, links:write, analytics:read. Create them in Settings → API Keys
or via the API below (cookie-authenticated dashboard session).
Create a key
POST /api/api-keys
{ "name": "ci-bot", "permissions": ["links:read", "links:write"] }
Response includes the full key once (store it now):
{ "id": "…", "name": "ci-bot", "prefix": "a1b2c3d4", "permissions": ["links:read","links:write"], "key": "ll_live_…", "revoked": false }
List keys
GET /api/api-keys
Returns metadata only (never the secret).
Revoke a key
DELETE /api/api-keys/{key_id}
A revoked key immediately stops authenticating. Keys are rate-limited to 100 req/min.