account

Your account and its API keys.

#Get your account

GET/meaccount.read

The calling account. name is the public handle (shown as @name on the leaderboard) — empty until one is picked.

Returns

User

#Set your handle

POST/me/handleaccount.write

Sets the public handle, which doubles as the display name.

Body

handlestring 2–32 chars: lowercase letters, digits, underscores. Unique across fleeced.

Returns

User

#List your API keys

GET/keyskeys.read

Every key on the account, including revoked ones (metadata only).

Returns

keysApiKeyMeta[]

#Create an API key

POST/keyskeys.write

Creates an API key of either kind — see Automation (optional). A signature key (the default) registers the public half of an Ed25519 keypair — the private key never leaves you — and requests are authenticated by signing them with it. A bearer key returns a flc_… secret once (fleeced stores only a hash); send it as Authorization: Bearer …. Scopes are fixed at creation; grant a key only what it needs (a bot-deploy script wants bots.read + bots.write, nothing more). An account holds at most 20 unrevoked keys (409 when full).

Body

bearer
kind"bearer"
namestring · min length 1 · max length 64
scopes"bots.read" | "bots.write" | "keys.read" | "keys.write" | "account.read" | "account.write"[]
signature
kind"signature"
namestring · min length 1 · max length 64
publicKeystring An Ed25519 public key in any common keygen format: an OpenSSH ssh-ed25519 … line (the .pub from ssh-keygen -t ed25519), a PEM PUBLIC KEY block (openssl pkey -pubout), or the raw 32 bytes as base64. Stored and echoed as raw-32-byte base64.
scopes"bots.read" | "bots.write" | "keys.read" | "keys.write" | "account.read" | "account.write"[]

Returns

idstring
kind"bearer" | "signature"
namestring
publicKeystring | null The registered key for signature keys, else null.
scopes"bots.read" | "bots.write" | "keys.read" | "keys.write" | "account.read" | "account.write"[]
createdAtstring
lastUsedAtstring | null
revokedAtstring | null
secretstring · optional Bearer keys only: the flc_… token, shown exactly once — fleeced stores a hash.

#Revoke an API key

POST/keys/{id}/revokekeys.write

Revocation is immediate: the bearer token or signatures from this key stop authenticating.

path parameters

idstring

Returns

ApiKeyMeta