API keys and programmatic access

What API keys are for

API keys enable programmatic access to the DataNostro REST API. You can use them for:

Automating container deployment
Monitoring statistics from your own systems
Integration with a CI/CD pipeline
Bulk domain management

Creating an API key

Go to Settings → API keys
Click "Create key"
Enter a name (description) for the key
Select the scope (permission): read, write, admin
Optionally set an expiration date
Important: You'll see the key only once! Copy it and store it safely.

Using it in the API

Pass the API key in the Authorization HTTP header:

GET /api/dashboard/
Authorization: Api-Key sk_live_xxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/json

Security rules

Keys are hashed — not even we see them in readable form
Each key is scoped to specific permissions
A compromised key can be revoked immediately
Never put a key into client-side JavaScript
Rotate the key at least every 90 days

Rate limiting

The API has a rate limit of 120 requests/minute for authenticated users. On exceeding it returns HTTP 429.