API keys

Open Account settings → API keys, enter a name and create a key. The key is shown once, so copy it straight away.

Send it as a bearer token:

curl -H "Authorization: Bearer YOUR_KEY" \
  "https://stats.example.com/api/v1/stats/aggregate?site_id=example.com&metrics=visitors"

A key has the same access as you: the sites you can see, it can query. The list shows when each key was last used. Delete a key to revoke it.

See the Stats API.

Note:

Some shared hosts strip the Authorization  header before PHP sees it. Tidemark's .htaccess  forwards it, but if requests return 401, ask your host or check that the rewrite rules are active.