Overview
Spott API offers two types of endpoints with different authentication requirements:Public Endpoints
Public endpoints are accessible without authentication and are typically used for:- Vacancy Portal: Browse and apply for jobs
- Candidate Portal: Submit applications and candidate information
- Public Resources: Access publicly available data
API Key Endpoints
API Key endpoints require authentication and should only be used from secure, server-side environments.
Getting Your API Key
- Log in to your Spott dashboard
- Navigate to Settings → API Keys
- Generate a new API key or copy an existing one
Using Your API Key
Include your API key in the request headers using thex-api-key header:
Best Practices
Keep Your API Key Secret
Keep Your API Key Secret
Never expose your API key in client-side code, public repositories, or version control. Use environment variables or secure key management systems.
Rotate Keys Regularly
Rotate Keys Regularly
Regularly rotate your API keys to minimize security risks. Generate a new key before revoking the old one to avoid service interruption.
Use Different Keys per Environment
Use Different Keys per Environment
Use separate API keys for development, staging, and production environments to isolate access and simplify key rotation.
Rate Limits
Rate limits apply to all API endpoints. Contact support@spott.io if you need higher limits.
- Public Endpoints: 100 requests per minute per IP
- API Key Endpoints: 1000 requests per minute per API key

