API Authentication
Learn how to generate API keys, understand scopes, and authenticate requests.
The FileChute REST API is available on the Pro plan. It lets you programmatically create requests, manage uploads, and integrate FileChute into your existing tools.
Generating an API key
- Go to Settings > API in your dashboard.
- Click Generate API Key.
- Copy the key immediately — it will only be shown once. Store it securely.
You can have one active API key at a time. Generating a new key invalidates the previous one.
Authentication
Include your API key in the Authorization header of every request:
Authorization: Bearer fc_live_xxxxxxxxxxxxxxxxxxxxAPI key format
API keys follow the format fc_live_ followed by a random string. Keys are hashed (SHA-256) before storage — FileChute never stores your raw key.
Rate limits
API requests are rate-limited to protect service quality:
- 100 requests per minute per API key
- 429 Too Many Requests is returned when the limit is exceeded
- The
Retry-Afterheader indicates when you can retry
Scopes
Currently, API keys have full access to your account's file requests, uploads, and clients. Granular scopes (read-only, write-only) are on the roadmap.
Security best practices
- Never expose your API key in client-side code or public repositories.
- Use environment variables to store API keys in your applications.
- Rotate your key if you suspect it has been compromised.
- Use HTTPS for all API requests — HTTP requests are rejected.
Base URL
https://filechute.com/api/v1All API endpoints are prefixed with /api/v1. See the API Endpoints reference for the full list.