# Authenticating with the INBIO API

## No auth needed: free shorten endpoint

`POST https://in.bio/api/shorten` with `{"url": "https://example.com"}` requires no
account, no key, no token. Rate limit: 5 requests/minute per IP.

## Full API v1: bearer tokens (no OAuth)

The full REST API (https://in.bio/api/v1) uses static bearer tokens. There is no
OAuth or OIDC flow and no programmatic client registration — a human creates
tokens in the dashboard:

1. Create an account at https://in.bio/register (API access requires a Pro or
   Business plan).
2. Go to Settings → API tokens and create a token with the scopes you need
   (`links:read`, `links:write`, `analytics:read`).
3. Send it as `Authorization: Bearer <token>` with `Accept: application/json`.

Docs: https://docs.in.bio/api · Machine index: https://in.bio/llms.txt