🔑

Authentication

All authenticated endpoints require a Bearer token in the Authorization header. Get your API key from Settings → Developer Mode → API Keys.

Tokens are scoped to your user account — all kids and data under your account are accessible with a single key.

Public endpoints (kid profiles, bill redemption) don't require authentication.

POST/api/v1/api-keys

Create a new API key

Request Body

{ "name": "My Integration" }

Response

{ "id": "uuid", "key": "kc_xxxxxxxxxxxx", "name": "My Integration" }

Requires Clerk session (browser only). The key is only shown once — save it immediately.

GET/api/v1/api-keys

List your API keys

Response

[{ "id": "uuid", "name": "My Integration", "keyPreview": "kc_xxx...xxx", "createdAt": "..." }]

DELETE/api/v1/api-keys/:id

Delete an API key

Response

{ "success": true }