Public API/Overview/Authentication
Public API

Authentication

Account API keys, Bearer auth, and how to select a project when you have more than one blog.

Account API key

One key per account authorizes all of your projects. Copy it from Dashboard → Account → API (also shown under project Settings → API). Treat it like a password — never commit it or paste it into chat logs.

Request headers

Authorization: Bearer YOUR_ACCOUNT_API_KEY X-Blogizi-Project: your-project-slug Content-Type: application/json

X-Blogizi-Project is optional when the account has exactly one project (the server picks it). With multiple projects it is required unless you pass projectSlug, project, or projectId in the JSON body.

Regenerate

Regenerating the key invalidates the old one. Re-run blogizi auth (and Obsidian settings) on every machine that uses the API.

GET /api/account/keys # dashboard session — returns/migrates key POST /api/account/keys # dashboard session — regenerates key

Key management endpoints use the dashboard session, not the API key itself.