Pro and above. Daily limits: Pro 50,000 requests · Business 200,000 · Agency 500,000 · Enterprise custom.
- Settings → API keys → Create key (Owners and Admins).
- Name the key (for example "Production server") and choose scopes (links read/write, QR read/write, pages, analytics read, domains read, webhooks manage).
- Copy the key now; it is shown once. Store it in your server's secret manager, never in front-end code, mobile apps or public repositories.
- Use it as a Bearer token:
Authorization: Bearer <key>againsthttps://api.urlcrop.com/v1/….
Tips
- Create one key per system so you can revoke one without affecting others. Keys show "last used" so you can spot unused ones.
- Rotate keys at least yearly, and immediately if one is exposed (… → Revoke, then create a new one).
- Rate limit responses are
429 Too Many Requestswith aRetry-Afterheader; see the API documentation for per-minute burst limits. - Need more daily calls? Buy a 1,000,000 API calls pack or upgrade.