API Authentication
Pro and Teams can mint API tokens in Settings. Send Authorization: Bearer rny_… . No session cookies.
Header
Pro and Teams mint tokens in Settings. Send them on every /api/v1 call. No CSRF. No session cookie.
curl -fsSL -H "Authorization: Bearer rny_…" https://runny.sh/api/v1/scriptsThe address must be verified. Unverified or missing tokens are indistinguishable as unauthorized.
Auth errors
- 401
{"error":"unauthorized"}— missing/unknown token, or email not confirmed. - 403
{"error":"API access requires Pro."}— authenticated Free account.