Skip to main content
Every REST request is authenticated with a bearer API key. The same keys and the same store back the REST API and the widget — there is one source of truth.

​
Key format

  • lsk_ — fixed Locus prefix.
  • <slug> — your client slug, e.g. almapro.
  • <random> — 32 hex characters.
Example: lsk_almapro_a1b2c3d4e5f6...

​
Sending the key

Pass it as a bearer token:
Always include the literal Bearer prefix. In the docs playground, the Authorize dialog adds it for you — paste only the raw key.

​
Errors

​
Rate limits

Usage is attached to your key. When a per-day quota is configured for your client, requests beyond it return 429 RATE_LIMIT. Contact Locus to adjust your quota.
API keys only: there is no OAuth on this surface.