API AUTHENTICATION
API Authentication
Every REST call needs a scoped API key. Here’s how to create one, use it, and stay within your rate limit.
API keys
API keys authenticate server-side requests. You create and manage them from your Dashboard under Settings → Developer → API Keys.
Creating an API key
- Open Settings → Developer → API Keys.
- Click Create API Key.
- Give it a descriptive name and select the scopes it needs.
- Copy the key immediately — it will not be shown again.
Using an API key
Send your key in the Authorization header:
Example request bash
curl -X GET "https://api.appgram.dev/v1/wishes" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" Scopes
Each key is limited to the scopes you grant it. Available scopes include:
wishes:read Read feature requests wishes:write Create and update feature requests roadmap:read Read roadmap items roadmap:write Manage roadmap items support:read Read support tickets support:write Manage support tickets helpcenter:read Read help center articles helpcenter:write Manage help center content Rate limiting
Requests are rate-limited based on your plan. Every response includes the current window state in headers:
X-RateLimit-Limit— total requests allowed per window.X-RateLimit-Remaining— requests remaining in the current window.X-RateLimit-Reset— unix timestamp when the window resets.
Best practice.
Handle 429 Too Many Requests by respecting the Retry-After header and backing off exponentially before retrying.