Open API Keys.
Generate a key
Click New key → give it a label → choose scopes:
read:subscriptionswrite:subscriptionsread:planswrite:plansread:analytics
The full key is shown ONCE — copy and store securely. RecurX keeps only a hash.
Authenticate
Authorization: Bearer rcx_live_xxxxxxxxxxxxxxxxxxxx
Hit https://api.recurx.app/v1/... with that header.
Rotate
Click Rotate on a key → old key works for 24 h, new key replaces it. Use this on team offboarding or suspected leak.
Rate limits
100 req/min/key. Bursts to 200 req/sec are allowed for short windows. Exceeding returns 429 with Retry-After.