Coding agent documentation index Fetch the complete documentation index at: https://docs.worklittle.com/docs-agent-manifest.json Use this file to discover all available pages before exploring further.

API Keys

API keys for Jobs search, apply, and document tools. Create and revoke them in Worklittle Business.

Create a key

In the Worklittle Business, go to API keys and select Create API key. Name the key for your environment (for example "Production backend"). The response shows the full sk-wl-api01-... secret once.

Store it in a secrets manager or environment variable. Worklittle never shows the full secret again, only a prefix for identification.

Revoke a key

On the same API keys page, open the menu on a row and choose Revoke. The key stops working immediately. This cannot be undone.

To rotate, create a new key, deploy the new secret, then revoke the old key.

Key format and scopes

Keys use the sk-wl-api01- prefix. Default rate limit is 60 requests per minute per key. View per-key limits on Limits in Worklittle Business.

| Scope | Allows |
| --- | --- |
| `jobs:read` | `GET /jobs`, `GET /jobs/:id`, `GET /jobs/map`, `GET /jobs/stats`, `GET /account` |
| `jobs:apply` | `POST /jobs/:id/apply`, MCP `submit_job_application` |
| `people:read` | Reserved - public People Search is temporarily unavailable |
| `agent:tools` | `POST /jobs/resumes`, `POST /jobs/cover-letters`, `POST /v1/agent/tool` |

New keys receive the default scopes for your account. Agents in Worklittle Business can also call list_api_keys and revoke_api_key when you approve those actions.

Session routes (Worklittle Business backend)

When you are signed in, the Worklittle Business calls these routes on api.worklittle.com with your session (not your sk-wl-api01-... secret):

| Method | Path | Action |
| --- | --- | --- |
| GET | `/api-keys` | List your keys |
| POST | `/api-keys` | Create a key |
| DELETE | `/api-keys/:id` | Revoke a key |

Use the API keys UI unless you are building your own session-authenticated client.