Keys and sign-in
A program of your own signs in with a key. Claude, ChatGPT, Claude Code and Home Assistant sign in with a click, so you never copy a key.
On this page
Create a key
- Open Spooly in the browser: Settings, Devices & keys, “Create key”. In the apps you see your connections. You create new ones in the browser.
- Give it a name so you recognize it in the list, and pick the type.
- Turn on “May also change” if your program should write.
- Copy the key. It starts with
spk_, and Spooly shows it only once. The list afterwards shows only the first eight characters.
| Type | Used for |
|---|---|
| Home Assistant | For the integration, if you do not sign in there with a click |
| AI assistant | For AIs that cannot sign in themselves |
| Spreadsheet | Only for the spreadsheet link. It can only read and does not work for the rest of the API. |
| Klipper printer | Only for the Spoolman address of a Klipper printer. It reads spools and reports usage and does not work for the rest of the API. Klipper |
| Other | For your own program |
Sending the key
Every request carries the key in its header. Only this header opens the API. A session from the app does not count here, and a key does not open any page of the app.
Authorization: Bearer spk_dein_schluesselhttps://spooly.eu/api/v1Reading and changing
Without “May also change” a key can only read. Every request that changes something then answers 403 insufficient_. You set the permission when you create the key. If you need it later, create a new key and revoke the old one.
Signing in with a click
Well-known apps sign in through OAuth. You land on a Spooly page, see what the app may read, and use the “Also allow changes” switch to decide whether it may also write. Other AI assistants can sign in the same way. Spooly calls them “AI assistant” there and shows the address the sign-in returns to.
| App | “Also allow changes” |
|---|---|
| Claude | Preselected |
| ChatGPT | Preselected |
| Home Assistant | Preselected |
| Claude Code | Off, because on your computer another program can pose as Claude Code |
| Other AI assistants | Off. Allow it only if you started the sign-in yourself just now. |
A program of your own uses a key.
Revoking and expiry
- You can revoke any connection under Settings, Devices & keys. It takes effect immediately and cannot be undone.
- If you change or reset your password, Spooly revokes all connections and keys of your account.
- When Pro expires, the API answers 403
pro_. The key stays and works again as soon as Pro is active.expired - New keys: at most 30 per hour per account. The total number you can have is not limited.