Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 2

Questions about the registration, management, and usage of API keys.

2 votes
Accepted

API key limit increase support

See this post for our policies related to API Keys and quotas.
Kevin Montrose's user avatar
3 votes
Accepted

What to do with API keys if our project is open-source?

Don't worry too much about leaking your key. Its not the end of the world. Remember, throttling and bans are done based on IP. The key is basically for identification purposes. Only in cases where …
Kevin Montrose's user avatar
3 votes
Accepted

Can I apply the API Key first and do the application later?

Don't register for a key until you need it. See "How API Keys Work" for more about API keys.
Kevin Montrose's user avatar
4 votes
Accepted

Creation of an API 'about' method for the application key being passed

Everything you want here is already implemented, except for next_downtime, which requires a level prescience we don't yet possess. API version is already served by the /stats method. Quota informati …
7 votes
Accepted

Is it safe to embed my API key into my javascript-only application?

Yes. Your API key identifies your application for stat tracking purposes more-so than security purposes. It is safe to leave in a plain text, user readable, format.
Kevin Montrose's user avatar
2 votes
Accepted

Do I need API key to use StackAuth API?

StackAuth does not currently have an API request limit. You really shouldn't be hitting it more than once a day though, for site information, and in accordance with general API guidelines for associa …
Kevin Montrose's user avatar
10 votes
0 answers
624 views

Separate Request Quotas for Authorized [app]s

Imagine, if you will, you have a popular [app] hosted on a cloud computing service which is also used by a number of other [app]s. If this service forces clients to share IPs (and they all do, in pra …
Kevin Montrose's user avatar
7 votes
Accepted

Is it appropriate to register for a "Dev" app key?

If you revisit your app registration, you can edit and update it. So, once you need a key for development purposes go ahead and register one and just fill in more information as you're able. Don't r …
Kevin Montrose's user avatar
6 votes
Accepted

What will be rate-limit of two different applications with two valid API keys from same IP?

An IP has a request quota, an application key is used to determine that quota. In answer to your question, 10k.
Kevin Montrose's user avatar
9 votes
Accepted

Registering app for API 2.0 key without Oauth domain

Yes, you can change very nearly everything (and actually everything that's user entered) about an application after it's been registered. You should use the domain you intend to host the client-side …
Kevin Montrose's user avatar
0 votes
Accepted

Confusion over my API key

Fixed. Remember, that the API limit is per-IP and per-site. For you, the important part is per-site. So, SO gets 10,000 requests a day, SF gets 10,000 requests a day, etc. etc. This can make your …
Kevin Montrose's user avatar
1 vote
Accepted

Don't allow requests with No Key to use existing session with valid API Key

I think you misunderstand how request limiting is meant to function. An IP has a limit of requests per-day. By using a key in a request, an application can promote an IP to a higher request limit. …
Kevin Montrose's user avatar
48 votes
0 answers
7k views

How API Keys Work (FAQ)

What are the API request limits? A single IP address can only make a certain number of API requests per day, depending on the presence of a valid API key. Default API daily limits: Key: 10,000 No Key …
3 votes
Accepted

Do the terms "key" and "access_token" refer to the same thing?

key is your app key, access_token identifies a user (and a set of permissions) and is what you get at the end of an authentication flow. Keys are not secret, for example here's what the Documentation …
Kevin Montrose's user avatar