API Authentication
Linquid uses API keys for authentication.
Getting an API Key
- Log in to dashboard.linquid.io
- Navigate to Settings > API Keys
- Click Create API Key
- Name your key and select scopes
- Copy the key (shown only once)
Using Your Key
Include in the Authorization header:
curl https://api.linquid.io/links \
-H "Authorization: Bearer lw_live_your_api_key_here"
Scopes
Limit API key permissions:
| Scope | Access |
|---|
links:read | Read links |
links:write | Create/update/delete links |
rules:read | Read rules |
rules:write | Create/update/delete rules |
analytics:read | View analytics |
campaigns:read | Read campaigns |
campaigns:write | Manage campaigns |
domains:read | Read domains |
domains:write | Manage domains |
Error Responses
Missing Key
{
"success": false,
"error": {
"code": "UNAUTHORIZED",
"message": "API key is required"
}
}
Invalid Key
{
"success": false,
"error": {
"code": "UNAUTHORIZED",
"message": "Invalid API key"
}
}
Insufficient Scope
{
"success": false,
"error": {
"code": "FORBIDDEN",
"message": "API key does not have 'links:write' scope"
}
}
Best Practices
Never expose API keys in client-side code, public repositories, or logs.
- Store keys in environment variables
- Use minimum required scopes
- Rotate keys periodically
- Monitor usage for anomalies
