Developer

Create API keys for automations, agencies, and internal tools.

API keys

Keys are stored as hashes. The secret is shown once after creation.

0 activeDefault read scopes

Public API rollout

Use these keys for the public API as endpoints are enabled. Admins can revoke abusive keys internally.

API documentation

Authentication, limits, examples, errors, and object constraints for the public API.

Authentication

Send the key as a bearer token. Public API routes live under /api/public/v1.

Rate limits

Free: 60/min. Paid plan: 1000/min. Admin keys use a higher internal cap.

Available resources

Account, usage, brands, products, and signed webhook endpoints are available now. Asset endpoints are being added next.

Product constraints

Catalog mutations preserve ownership checks and soft-delete behavior. Webhook deliveries include x-nano-signature.

Example request

curl -H "Authorization: Bearer nas_..." \
  https://nanoadstudio.com/api/public/v1/catalog/products

Error shape

{
  "error": "API rate limit exceeded",
  "code": "PUBLIC_API_RATE_LIMITED",
  "retry_after_seconds": 60
}

Keys are hashed with SHA-256 before storage.