API Reference
Developer surfaces in this product. Pages are linked; HTTP endpoints are listed as paths because they return JSON, not pages.
Settings > Security > Developer
Read-only overview of your API keys, OAuth applications, and data export requests. No changes can be made here, so no CSRF token is required. Use it to confirm key prefixes, scopes, client redirect URIs, and export status.
Settings > Security > OAuth Applications
Register third-party apps with a name, https redirect URI, and scopes. The client secret is shown once at registration. Issue a single-use 10-minute authorization code with Get code, or Revoke an app to disable it.
GET /api/auth/api-keys and POST /api/auth/api-keys
List your keys (prefixes and scopes only; full secrets are never returned) and create new keys. There is no settings UI that manages API keys, so call this endpoint directly. Review current keys on the Developer page above.
Settings > Security > Sessions
Lists devices signed in to your account with IP address and expiry. Revoke one session or all other sessions; revoking signs that device out immediately.
Settings > Security > Signing Keys
Generate Ed25519 key pairs used for script registration signatures. Only the public key is persisted; the private key is shown once at creation.
Settings > Privacy
File and track data export requests, control consent, or erase account data. The Developer page links here for export management.