Authentication

Enterprise tier exposes a REST API for programmatic schedule management. Authentication is via API key.

Getting an API key

1. WP Admin → Image Rotation → Settings → API access (Enterprise only).
2. Click Generate API key. The key is shown only once.
3. Copy and store securely.

Authentication

Send the API key in the Authorization header:

Authorization: Bearer your-api-key-here

Rate limits

• 120 requests per minute per API key.
• Bursts up to 30 requests in 5 seconds.
• Exceeding triggers a 429 with a Retry-After header.

Revoking a key

The same Settings → API access page. Click Revoke next to the key. The key is immediately invalidated; in-flight requests using it return 401.