API

Authentication

Create an API key and authenticate your requests.

Create a key

Open the API keys tab in your account and create a key. The full key is shown once at creation — copy it then, because it can't be retrieved again. Only a hash is stored on our side.

Authenticate a request

Send the key as a bearer token on every request to the API and the MCP server:

Authorization: Bearer grk_live_xxxxxxxxxxxxxxxxxxxx

An X-API-Key: grk_live_… header works too, if bearer auth is awkward for your client.

Keys and your plan

  • A key acts as you — requests made with it consume the same quota as the web app.
  • Revoke a key any time from the same tab to cut off access immediately; create as many as you need for different tools.
  • The REST API and MCP server require the database, so they're only available when accounts are enabled.