API keys and permissions

Open Settings → Apps & API and press Create key. Copy the key straight away: we only show it once.

Choose what the key can do:

• Everything — the same as you.
• Read only — links and stats, nothing changes. Good for dashboards and reports.
• Only some things — pick from making links, branded domains, uploads, webhooks and pixels, and reporting conversions.

If a key tries something it isn't allowed to, the API answers 403 with the error code insufficient_scope. Revoke a key any time and anything using it stops working.

The full API reference is on the developers page.