API Key
All data endpoints require an API key. Pass it via header:Authorization: Bearer YOUR_API_KEY.
Creating an API Key
- Register or log in to get a session cookie
- Create a key:
key from the response immediately — it cannot be retrieved later.
Managing Keys
| Action | Method | Endpoint |
|---|---|---|
| List keys | GET | /v1/api/auth/api-keys |
| Revoke key | DELETE | /v1/api/auth/api-keys/{id} |
jwt cookie.
Session Auth
Account management endpoints use JWT cookie-based sessions. A session is set automatically on register (POST /v1/api/auth/register) or login (POST /v1/api/auth/login). Google OAuth is also supported via GET /v1/api/auth/google.
Error Responses
| Status | Meaning |
|---|---|
401 | Missing or invalid API key / session |
429 | Rate limit exceeded |