Back to docs
API Reference

API Authentication

Learn how to generate API keys, understand scopes, and authenticate requests.

The FileChute REST API is available on the Pro plan. It lets you programmatically create requests, manage uploads, and integrate FileChute into your existing tools.

Generating an API key

  1. Go to Settings > API in your dashboard.
  2. Click Generate API Key.
  3. Copy the key immediately — it will only be shown once. Store it securely.

You can have one active API key at a time. Generating a new key invalidates the previous one.

Authentication

Include your API key in the Authorization header of every request:

Authorization: Bearer fc_live_xxxxxxxxxxxxxxxxxxxx

API key format

API keys follow the format fc_live_ followed by a random string. Keys are hashed (SHA-256) before storage — FileChute never stores your raw key.

Rate limits

API requests are rate-limited to protect service quality:

  • 100 requests per minute per API key
  • 429 Too Many Requests is returned when the limit is exceeded
  • The Retry-After header indicates when you can retry

Scopes

Currently, API keys have full access to your account's file requests, uploads, and clients. Granular scopes (read-only, write-only) are on the roadmap.

Security best practices

  • Never expose your API key in client-side code or public repositories.
  • Use environment variables to store API keys in your applications.
  • Rotate your key if you suspect it has been compromised.
  • Use HTTPS for all API requests — HTTP requests are rejected.

Base URL

https://filechute.com/api/v1

All API endpoints are prefixed with /api/v1. See the API Endpoints reference for the full list.