Skip to main content
Every torrent and store endpoint is authenticated with your instance API key — the same key your Stremio addon and dashboard use. Public /api/* endpoints need no auth.

​
Get your API key

Your API key is issued when your account is created. On the hosted instance it’s shown in the dashboard; you can also create an account directly:
Treat the key like a password. Your primary key grants full account access — if it leaks, rotate it from the dashboard. For addons, prefer a dedicated API-only key (below) that can be revoked on its own and can’t be used to sign in.

​
Use it

Send the key as a bearer token on every authenticated request:
For compatibility, two surfaces also accept alternate forms:

​
Multiple keys & API-only keys

Instead of sharing one key everywhere, you can issue several. Give each addon or integration its own labelled key, so if one leaks you revoke just that key without disturbing the others. Each key is one of:
  • Login-enabled — full account access (dashboard, billing, credentials, key management).
  • API-only — can stream, download, and search, but cannot sign in or change your account. This is the default for new keys and the right choice for an addon: a leaked API-only key can’t take over your account.
Every key belongs to your account, so all of them are bound to your plan, limits, and expiry.
Managing keys requires a login-enabled key. API-only keys receive 403 on account routes.

​
List your keys

​
Create a key

The key is returned once — store it now. Up to 20 keys per account.

​
Revoke a key

The key stops working immediately.

​
Errors

Both error shapes differ by surface: /rest/1.0 returns { "error": "...", "error_code": 8 }, and /v0/store returns { "error": { "code": 401, "message": "..." } }.