Skip to main content

​
API keys

Every request must include your API key. Each key is scoped to a single organization — all data returned is automatically filtered to that organization. You can send the key in any of these headers (all are equivalent):
We recommend using x-api-key as the canonical header name. The x-spotlight-api-key and spotlight-api-key headers remain supported for compatibility.

​
Getting a key

  1. Go to Settings → API in the rocketblue app.
  2. Copy the key shown on the page.
  3. Keep it secret — treat it like a password.
API access is available on all plans for members who are not viewers or guests.

​
MCP authentication

Claude custom connectors and ChatGPT custom MCP apps use OAuth instead of an API key. Get the Server URL, OAuth Client ID, and Client Secret from Settings → MCP. In Claude, set authentication to Always required and choose Use your own OAuth client. See Connect an MCP client. Cursor and other header-based MCP clients use the same API key headers as REST.

​
Authentication errors

​
Rate limiting

API keys have a quota on the number of requests per minute, configurable per organization (default: 120 req/min). When the limit is exceeded the API returns 429 Too Many Requests.

​
Example