Code Card / Developers

Developer API

Use the Code Card Library API to read published, unrestricted Code Cards from your own tools and integrations. API keys are tied to your account, are shown only once when created, and can be revoked at any time.

Last updated: October 3, 2026

Developer access

API keys

API Free: 1,000 requests/month

Checking your account…

Quick start

Create an API key above, copy it immediately, then send it as a Bearer token. Never put an API key in public JavaScript, a repository, screenshots, support tickets, or published Code Cards.

curl https://codecardlib.com/api/v1/cards \
  -H "Authorization: Bearer ccl_YOUR_KEY"

Available endpoints

GET /api/v1/cards

List published, unrestricted cards. Optional query parameters: q, language, and page.

GET /api/v1/cards/:id

Read one published, unrestricted Code Card by ID.

GET /api/v1/usage

Read the current API plan and quota consumption for the key making the request.

API Free limits

The current API Free plan includes 1,000 requests per calendar month and up to 30 requests per minute. Authenticated API requests count toward usage. Rate and quota information is also returned in response headers.

X-CodeCard-API-Plan: api_free
X-RateLimit-Limit: 30
X-RateLimit-Used: 1
X-Monthly-Limit: 1000
X-Monthly-Used: 1

Responses and errors

The API returns JSON. Missing, invalid, expired, or revoked credentials return 401. A rate or monthly quota limit returns 429. A card that is private, restricted, unavailable, or has an invalid ID is not exposed through the developer API.

Key security

Code Card Library stores a one-way SHA-256 digest of each API key rather than the readable secret. A newly created key is therefore shown only once. If it is lost, revoke it and create another key.

Use separate keys for separate devices or integrations. That makes it possible to revoke one credential without interrupting everything else.

Paid API plans

API Developer, API Pro, and API Business are available through production Stripe checkout and have passed entitlement verification. API Business also passed isolated high-volume verification above 1,000 requests per minute. API Enterprise remains unavailable.