Authentication

Widget API key

For submitting feedback from the browser, use your project API key as a header or query parameter:

POST https://api.lumifeed.app/v1/feedback
x-api-key: pk_live_abc123

Widget keys are write-only — they can submit feedback but not read it. They're safe to include in client-side code.

Bearer token (server-side)

For reading feedback or managing your account server-side, use a Bearer token (available on Pro and Agency plans):

GET https://api.lumifeed.app/v1/projects/{projectId}/feedback
Authorization: Bearer sk_live_abc123

Dashboard session

The Lumifeed dashboard uses OAuth session cookies automatically. If you're building integrations that run in the browser while logged in, you don't need to manage tokens.

Headers

Errors