Coding agent documentation index Fetch the complete documentation index at: https://docs.worklittle.com/docs-agent-manifest.json Use this file to discover all available pages before exploring further.

API Keys

Create, scope, and revoke API keys for posting, ATS, organization, documents, and webhooks.

Create a key

In Worklittle Business, open API keys and select Create API key. Name it for its environment, such as "Production backend".

The full sk-wl-api01-... secret is shown once. Store it in a secrets manager or environment variable. Afterward only a prefix is visible.

Revoke a key

On API keys, open the row menu and choose Revoke. The key stops working immediately and this cannot be undone.

To rotate, create a new key, deploy it, then revoke the old one.

Key format and scopes

Keys start with sk-wl-api01-. The default rate limit is 60 requests per minute per key. See per-key limits on Limits.

| Scope | Allows |
| --- | --- |
| `jobs:post` | `/business/jobs`, `/jobs/manage`, `/business/jobs/*` (employer listings) |
| `jobs:applications` | ATS routes (`/candidates`, `/employees`, `/offers`, `/attendance`, email, and more) |
| `people:read` | Reserved. Public People Search is temporarily unavailable. |
| `webhooks:manage` | `/webhooks` CRUD and delivery |
| `documents:read` / `documents:write` | `/business/documents` HR docs and e-sign |
| `employees:read` | Survey management and related employee-org reads |

New keys get your account's default scopes. Agents in Worklittle Business can call list_api_keys and revoke_api_key when you approve them.

Session routes (Worklittle Business backend)

Worklittle Business calls these routes with your signed-in session. A key with the jobs:applications scope can also list, create, and revoke keys, but it cannot reveal a secret. Use the API keys page unless you are building your own client.

| Method | Path | Action |
| --- | --- | --- |
| GET | `/api-keys` | List keys |
| POST | `/api-keys` | Create a key |
| DELETE | `/api-keys/:id` | Revoke a key |