Authentication

The WillItTrack API supports API key authentication and anonymous access for select endpoints. All authenticated requests use a Bearer token in the Authorization header.

Header Format

Authorization: Bearer <token>

The API auto-detects the token type based on its format.

API Keys (Recommended)

API keys are the recommended method for programmatic access. Keys use the format pg_live_<uuid> and are created via the API or the Settings page.

Create an API key

curl

curl -X POST https://api.willittrack.com/v1/keys \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <your_clerk_jwt>" \
  -d '{"name": "My Integration"}'

Response

{
  "data": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "key": "pg_live_a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "keyPrefix": "pg_live_a1",
    "name": "My Integration",
    "createdAt": "2026-02-14T12:00:00.000Z",
    "expiresAt": null
  }
}

The full API key is only returned once at creation time. Store it securely — it cannot be retrieved later.

Use the key

curl

curl https://api.willittrack.com/v1/checks \
  -H "Authorization: Bearer pg_live_a1b2c3d4-e5f6-7890-abcd-ef1234567890"

Anonymous Access

Some endpoints work without authentication, subject to lower rate limits and usage caps.

Endpoint	Method	Notes
/v1/checks	POST	5 free link checks per month (IP-based)
/v1/detect	POST	Free, unlimited network detection
/v1/checks/:slug	GET	Retrieve any check by its slug
/v1/reports/:slug	GET	Public report (increments view count)
/v1/reports/:slug/evidence	GET	Download dispute evidence as .txt

Example (no auth)

curl

curl -X POST https://api.willittrack.com/v1/checks \
  -H "Content-Type: application/json" \
  -d '{"url": "https://www.awin1.com/cread.php?awinmid=1234&awinaffid=5678&p=https://example.com"}'

Key Management

Action	Endpoint	Method
Create a key	/v1/keys	POST
List your keys	/v1/keys	GET
Revoke a key	/v1/keys/:id	DELETE

You cannot revoke the API key you are currently using to make the request.