Use MoodLens API keys
External API keys are the direct server-to-server access lane for trusted backends.
What API keys are for
API keys are the simplest programmatic access lane when a trusted backend needs to call MoodLens directly. Workspace admins or owners create and revoke them.
Scopes, auth, and limits
Current scopes: tasks, documents, team, columns, and write.
Keys are revealed once at creation time and have labels plus scopes.
Authentication accepts X-API-Key for direct key usage and Authorization: Bearer for developer-app OAuth tokens.
Rate limit is 60 requests per minute per credential, and write bodies are limited to 50 KB.
Supported resource families
Read access spans tasks, documents, team, columns, workspaces, integrations, boards, sprints, and meetings.
Write coverage includes creating and updating tasks, archiving tasks, creating and updating documents, creating sprints, creating meetings, and adding task comments.
DELETE task calls archive rather than hard-delete the task.
Document list responses may truncate content unless the caller explicitly asks for full content.
Workspace switching
API keys can switch workspace context with workspaceId if the key creator has access to the requested workspace.
Developer-app OAuth tokens are bound to one workspace and cannot switch to another.