Coding agent documentation index Fetch the complete documentation index at: https://docs.worklittle.com/docs-agent-manifest.json Use this file to discover all available pages before exploring further.

API Keys

Create, scope, and revoke API keys for Jobs search, apply, and document tools.

Create a key

In Worklittle Business, open API keys and select Create API key. Name it for its environment, such as "Production backend".

The full sk-wl-api01-... secret is shown once. Store it in a secrets manager or environment variable. Afterward only a prefix is visible.

Revoke a key

On API keys, open the row menu and choose Revoke. The key stops working immediately and this cannot be undone.

To rotate, create a new key, deploy it, then revoke the old one.

Key format and scopes

Keys start with sk-wl-api01-. The default rate limit is 60 requests per minute per key. See per-key limits on Limits.

| Scope | Allows |
| --- | --- |
| `jobs:read` | `GET /jobs`, `GET /jobs/:id`, `GET /jobs/map`, `GET /jobs/stats`, `GET /account` |
| `jobs:apply` | `POST /jobs/apply` (MCP `apply_for_job`), `POST /jobs/:id/apply` (MCP `submit_job_application`) |
| `people:read` | Reserved. Public People Search is temporarily unavailable. |
| `agent:tools` | `POST /jobs/resumes`, `POST /jobs/cover-letters`, `POST /v1/agent/tool` |

New keys get your account's default scopes. Agents in Worklittle Business can call list_api_keys and revoke_api_key when you approve them.

Session routes (Worklittle Business backend)

Worklittle Business calls these routes with your signed-in session. A key with the jobs:applications scope can also list, create, and revoke keys, but it cannot reveal a secret. Use the API keys page unless you are building your own client.

| Method | Path | Action |
| --- | --- | --- |
| GET | `/api-keys` | List keys |
| POST | `/api-keys` | Create a key |
| DELETE | `/api-keys/:id` | Revoke a key |