Fishladder

API Keys

API keys allow programmatic access to your team's data via the Fishladder REST API. Only team admins can create and manage API keys.

Creating an API Key

  1. Go to Settings → API Keys.
  2. Enter an optional label (e.g., "CI Integration", "Zapier").
  3. Click Generate Key.
  4. Copy the key immediately. It is shown only once and cannot be retrieved later.

Using an API Key

Include the key in the Authorization header of your API requests:

Authorization: Bearer fl_your_api_key_here

Each key is scoped to a single team. All API calls made with that key access only that team's data.

Rate Limits

API requests are rate-limited to 1,000 reads and 200 writes per hour, counted per key rather than per team — so one busy integration cannot exhaust another’s budget, and a read-heavy script cannot block your writes. Exceeding a budget returns 429 with a Retry-Afterheader and a scope field naming which one ran out.

Revoking a Key

To revoke a key, click the delete icon next to it on the API Keys settings page. Revoked keys stop working immediately.

Security

  • API keys are hashed (SHA-256) before storage. Fishladder never stores the plaintext key.
  • Only the first and last few characters are shown as a hint for identification.
  • Treat API keys like passwords — do not commit them to version control or share them in public channels.