API keys
Updated
Open Account → API keys, enter a name and create a key. The key is shown once, so copy it straight away.
Send it as a bearer token:
curl -H "Authorization: Bearer YOUR_KEY" \ "https://stats.example.com/api/v1/stats/aggregate?site_id=example.com&metrics=visitors"
Choose the key's access when you create it:
- Read-only (the default) can read statistics through the Stats API and the MCP server, and nothing else. It can't change settings, list keys or reach any other part of the API, so it is the right choice for reporting scripts and AI assistants.
- Full access has the same access as you: the sites you can see, it can query and change. Keys created before Tidemark 0.31 are full access.
The list shows each key's access and when it was last used. Delete a key to revoke it.
See the Stats API.
Note:
Some shared hosts strip the Authorization header before PHP sees it. Tidemark's .htaccess forwards it, but if requests return 401, ask your host or check that the rewrite rules are active.
Was this helpful?
Ready to try Tidemark?
Free plan, no credit card. No cookies, no footprints.