> ## Documentation Index
> Fetch the complete documentation index at: https://openclaw.yoinkit.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Get your API key and authenticate requests

## Getting Your API Key

<Steps>
  <Step title="Log in to Yoinkit">
    Go to [yoinkit.ai](https://yoinkit.ai) and log in with your account.
  </Step>

  <Step title="Navigate to OpenClaw Settings">
    In Settings, find the **OpenClaw** section (between Settings and Billing).
  </Step>

  <Step title="Generate API Token">
    Click **Generate Token** to create your API key.

    <Warning>
      You can only have one active token at a time. Generating a new token will invalidate any existing token.
    </Warning>
  </Step>

  <Step title="Copy Your Token">
    Copy the token immediately—it won't be shown again. Store it securely.
  </Step>
</Steps>

## Requirements

<Note>
  API access requires an **active Yoinkit subscription** on your team. If your subscription expires, API calls will return a `403 Forbidden` error.
</Note>

## Making Authenticated Requests

Include your API token in the `Authorization` header as a Bearer token:

<CodeGroup>
  ```bash cURL theme={null}
  curl -X GET "https://yoinkit.ai/api/v1/openclaw/youtube/transcript?id=dQw4w9WgXcQ" \
    -H "Authorization: Bearer YOUR_API_TOKEN"
  ```

  ```javascript JavaScript theme={null}
  const response = await fetch('https://yoinkit.ai/api/v1/openclaw/youtube/transcript?id=dQw4w9WgXcQ', {
    headers: {
      'Authorization': 'Bearer YOUR_API_TOKEN'
    }
  });
  ```

  ```python Python theme={null}
  import requests

  response = requests.get(
      'https://yoinkit.ai/api/v1/openclaw/youtube/transcript',
      params={'id': 'dQw4w9WgXcQ'},
      headers={'Authorization': 'Bearer YOUR_API_TOKEN'}
  )
  ```
</CodeGroup>

## Error Responses

| Status Code             | Meaning                                |
| ----------------------- | -------------------------------------- |
| `401 Unauthorized`      | Missing or invalid API token           |
| `403 Forbidden`         | Token valid but no active subscription |
| `429 Too Many Requests` | Rate limit exceeded                    |

## Rate Limits

| Plan    | Requests/Minute | Requests/Day |
| ------- | --------------- | ------------ |
| Starter | 30              | 1,000        |
| Pro     | 60              | 5,000        |
| Team    | 120             | 20,000       |

<Tip>
  Rate limits are per-team, not per-token. All team members share the same limit.
</Tip>

## Token Management

### Refreshing Your Token

If your token is compromised or you want to rotate it for security:

1. Go to **Settings → OpenClaw**
2. Click **Refresh Token**
3. Update your applications with the new token

### Token Expiration

Tokens do not expire automatically. However, they become invalid if:

* You manually refresh the token
* Your team's subscription lapses
* Your account is suspended