AppleakDocs
Open AppleakGet an API key

Get started

Authentication

One key answers for the REST API and the MCP server. You make keys in Appleak, under Account → API.

Send the key as a bearer token in the Authorization header of every request. Only that header is read: not a cookie, and not the address, which ends up in logs.

Header
curl https://appleak.app/api/v1/me \
  -H "Authorization: Bearer apk_live_YOUR_KEY"

A request with no key, a malformed one or a revoked one is answered 401. See Errors.

#Kinds of key

Full

Reads, and starts runs that spend your plan’s credits. For your own scripts and servers.

Read-only

Reads only: a run it tries to start is refused with 403. The one to give an AI assistant you are trying out.

With a daily cap

Either kind can carry its own credits a day, so a script that goes wrong stops there.

#Keeping it safe

  • A key is shown once, when you make it. Appleak keeps a fingerprint of it, never the key. Lost it? Revoke it and make another.
  • A revoked key stops working within a minute.
  • Each key shows when it was last used, under Account → API.