{
  "success": false,
  "error": {
    "code": "AUTHENTICATION_REQUIRED",
    "message": "Authentication required",
    "requestId": "req_1234567890abcdef"
  },
  "timestamp": "2024-01-15T10:30:00Z"
}
WebLinq uses API key authentication to secure all requests. Every API call must include a valid API key to identify your account and track usage.
All endpoints require authentication except health checks. This ensures your usage is tracked and your data remains secure.

Get your API key

1

Create your account

Sign up at WebLinq - it’s free to get started.
2

Generate your key

  1. Go to API Keys in your dashboard 2. Click “Create API Key” and give it a descriptive name 3. Copy your API key immediately
    API keys are only shown once. Store them securely in environment variables.
3

Test your key

Verify your API key works:
curl -H "Authorization: Bearer YOUR_API_KEY" \
  "https://api.weblinq.dev/v1/user/me"

Authentication methods

Bearer token

Include your API key in the Authorization header:
curl -X POST "https://api.weblinq.dev/v1/web/markdown" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://example.com"}'
Use Authorization: Bearer when possible - it’s the standard approach and works with most HTTP libraries.

Error responses

{
  "success": false,
  "error": {
    "code": "AUTHENTICATION_REQUIRED",
    "message": "Authentication required",
    "requestId": "req_1234567890abcdef"
  },
  "timestamp": "2024-01-15T10:30:00Z"
}
{
  "success": false,
  "error": {
    "code": "RATE_LIMIT_EXCEEDED",
    "message": "Rate limit exceeded",
    "requestId": "req_1234567890abcdef"
  },
  "timestamp": "2024-01-15T10:30:00Z"
}

Rate limits

API keys have different limits based on your plan:
PlanRequests/HourConcurrentFeatures
Free1,0005All endpoints
Pro10,00020Priority support
EnterpriseCustomCustomDedicated support

Rate limit headers

Every response includes rate limit information:
X-RateLimit-Limit: 1000
X-RateLimit-Remaining: 999
X-RateLimit-Reset: 1705312200

Security best practices

Environment variables

Always store API keys in environment variables:
# .env file
WEBLINQ_API_KEY=your_api_key_here
const apiKey = process.env.WEBLINQ_API_KEY;

Security checklist

Security reminder: Never share API keys, commit them to Git, or use them in client-side code.

Need help?