Public API

Create a private report token

Generate a token in Integrations and copy it while shown. Only its hash is stored. A website token grants aggregate reporting access to that website. An account token can access websites authorized for its owner.

curl 'https://orlyn.cc/api/v1/websites/YOUR_WEBSITE_ID/report' \
  -H 'Authorization: Bearer YOUR_PRIVATE_TOKEN'

Use the exact endpoint displayed in Integrations. Account website discovery uses /api/v1/websites. Tokens belong on your server, not in frontend JavaScript, browser URLs, or public repositories.

Rotate or revoke a token

Regenerating a token invalidates the previous token. Revoking it blocks subsequent requests. The public tracker website ID is a separate identifier and has no permission to read reports.

These endpoints return aggregate analytics; they do not expose Google OAuth credentials or personal customer profiles.

Need help? Email support@orlyn.cc.