Authentication
All API endpoints require a user-level API key, reads included. The key gates abuse and attributes usage to your account.
Send it as a Bearer token on every request:
Your key acts as you. It can create and edit contributions (reviews, trivia, cover votes) under your account. It cannot change account settings such as your email or password.
Create a key
Keys are prefixed ak_. Copy the key when it’s shown; store it somewhere safe.
Be considerate
Make only the requests you need, cache where appropriate, and identify yourself with a descriptive User-Agent. Don’t hammer the API.
You are responsible for your API key. Any misuse, overuse, sharing or exploitative action may lead to a permanent ban from both the website and the API. Keep it safe and secret; never commit it to source control or ship it in client-side code.
A missing or invalid key returns 401 UNAUTHORIZED. See Errors for the full list.

