Agent API
Security and operating principles for LinkQuick agent access.
LinkQuick is designed so authorized internal agents can manage link workflows without MCP or manual dashboard interaction.
Authentication
Agents authenticate with revocable organization API tokens backed by Better Auth. A token derives its organization from the verified credential; clients do not select an organization by sending an arbitrary organization identifier.
Store tokens as secrets, grant only the required permissions, and revoke tokens that are no longer used.
API principles
The versioned API covers domains, parent links, sublinks, analytics, attributed users, and events. Operations that may be retried must support idempotency, and list operations must use bounded pagination.
The endpoint-level contract and request examples will be added when the agent API implementation is complete. No production base URL or example credential is published here.