Get started
Authentication
Every request carries an API key as a bearer token.
Create a key under Settings → API keys and send it as a bearer token with every request:
Authorization: Bearer smk_…A key belongs to the account that was active when it was created, and only works for that account: it lists, reads, creates and publishes that account's posts and nothing else, so it never needs the account parameter. To automate several accounts, create a key for each. Settings can show and copy a key again at any time.
Access levels
| Key | Can |
|---|---|
| Read only | Call every GET endpoint. |
| Read & write | Also create, change, publish and delete posts and media. |
Keep keys on a server. Anyone who has a key can post as its account. Don't put it in browser code or a public repository.