API

Use the NotiCord API when an AI agent, script, or power-user tool needs to configure NotiCord without using the app UI. The owner still uses the app to connect Discord, connect Notion, and create the first API key. Account linking uses the normal Discord/app approval flow.

Access

Create API keys from the API page in the app. API access is available on every plan.

NotiCord shows the full key only once. Store it in your agent or script secret store.

Send the key as a bearer token. For example, list saved notification rules:

curl https://app.noticord.com/api/v1/notification-rules \
  -H "Authorization: Bearer ntc_your_key"

Limits

When a key hits a rate limit, the API returns 429 with Retry-After and rate-limit headers. If a plan change leaves more active keys than the new limit, only the oldest keys within that limit can call the API until you revoke extras.

Contract

The API manages post-bootstrap configuration: discovery lists for shared Notion and Discord resources, notification rules, scheduled summaries, create commands, page lists, and panels.

It returns complete saved configuration for those workflow resources, including shared-channel destinations, direct-message destinations when present, assignee mention settings, is me filters, and Assign to me quick actions. Direct-message destinations are represented on the owning notification rule or scheduled summary; the API does not expose separate account-link discovery or management endpoints. It does not perform OAuth setup, proxy arbitrary Notion or Discord API calls, or expose internal app helpers such as previews, history, debug routes, pasted-link verification, or account-inspection endpoints. Responses include stable configuration fields and omit UI-only metadata, provider emails, internal message IDs, timestamps, and delivery history.

Use the human-readable spec at /api/v1/docs for endpoints, parameters, request bodies, response shapes, examples, and errors. The raw OpenAPI JSON for tools is available at /api/v1/openapi.json.

Safety

Revoke keys you no longer use from the app API page. Revoked keys stop working immediately.

Do not put API keys in Notion pages, Discord messages, source code, or client-side browser code.