API Authentication

Generate API keys, authenticate REST requests with bearer tokens, scope permissions, and rotate credentials safely in LemWatch.

Updated 2026-03-02

1 min read

API

authentication

key

API Authentication#

Go to Settings → API

Click "Create API Key"

Give it a name (e.g., "CI/CD Pipeline", "Monitoring Dashboard")

Set permissions:

Read — Fetch site data, check results, reports

Write — Add sites, trigger checks, update settings

Read + Write — Full access

Copy the key — it's only shown once!

Include it in the Authorization header:

GET /api/v1/sites
Authorization: Bearer lw_your_api_key_here
Content-Type: application/json

Rotate keys regularly — Create a new key, update your integrations, then delete the old one

Use descriptive names — So you know which key is used where

Minimum permissions — Only grant read access if write isn't needed

Monitor usage — Check key usage in Settings → API → Usage

Store keys in environment variables, never in code

Never commit keys to version control

Set IP allowlists for production keys (Enterprise)

Was this article helpful?

API Rate Limits

Understanding API rate limits and how to handle them.

API Endpoints Reference

Overview of available API endpoints and their usage.

How do I create and revoke MCP tokens?

MCP tokens are org-scoped bearer secrets. Create them in Settings, copy once, and revoke any time — hashes are stored, plaintext never is.

MCP tool catalog: everything Claude and ChatGPT can call

The 11 MCP tools, 4 resources, and 5 prompts Lemwatch exposes to AI assistants — with what each one does and who can call it.