Authentication

API key (your workspace)

1. https://app.qposty.com/settings/developers → Access
2. Generate key → copy qp_live_…
3. Send on every request:

curl -H "Authorization: qp_live_YOUR_KEY" \
  https://api.qposty.com/public/v1/is-connected

Rotating replaces the key. Old keys stop working immediately. Keys do not expire on their own.

OAuth access token (other workspaces)

After the OAuth authorize flow you receive pos_…:

curl -H "Authorization: pos_YOUR_TOKEN" \
  https://api.qposty.com/public/v1/channels

Tokens do not expire. Users revoke them under Approved apps.

Trial and plans

The same subscription rules as the dashboard apply. An expired free trial cannot create posts until a paid plan is active (403 with TRIAL_EXPIRED).