API Authentication
Generate API keys, authenticate REST requests with bearer tokens, scope permissions, and rotate credentials safely in LemWatch.
API Authentication
Getting Your API Key (Pro Plan Required)
- Go to Settings → API
- Click "Create API Key"
- Give it a name (e.g., "CI/CD Pipeline", "Monitoring Dashboard")
- Set permissions:
- Read — Fetch site data, check results, reports
- Write — Add sites, trigger checks, update settings
- Read + Write — Full access
- Copy the key — it's only shown once!
Using Your API Key
Include it in the Authorization header:
Key Management
- Rotate keys regularly — Create a new key, update your integrations, then delete the old one
- Use descriptive names — So you know which key is used where
- Minimum permissions — Only grant read access if write isn't needed
- Monitor usage — Check key usage in Settings → API → Usage
Key Security
- Store keys in environment variables, never in code
- Never commit keys to version control
- Set IP allowlists for production keys (Enterprise)