Quickstart
Create an API key and make your first authenticated request.
- Sign in, open Settings → Developer, create an app and a key. New keys get
read:publiconly; tick each extra scope. The full key (tt_<prefix>_<secret>) is shown once, so store it in a secret manager. - Call the API with the key as a bearer token. Never send cookies with it.
export TUNETOYS_API_KEY=tt_...
curl -H "Authorization: Bearer $TUNETOYS_API_KEY" "https://tune.toys/v1/catalog?q=delay"
curl -H "Authorization: Bearer $TUNETOYS_API_KEY" https://tune.toys/v1/developer/key- From TypeScript,
new PlatformClient('https://tune.toys/v1', fetch, { apiKey })sends the bearer, omits credentials and skips CSRF. It refuses to run in a browser page unless you passallowBrowserKey. - For agents, run the MCP server with
TUNETOYS_API_KEY.
GET /v1/developer/key introspects the key: its app, scopes, tier and expiry. It is free of rate-limit cost, so use it to check your setup.