API Keys & Projects
Each website you track is a project in BotSights. Each project has its own API key and dashboard.
Creating a Project
- Go to Account settings
- Under Projects & API Keys, enter a name and domain
- Click Add Project
- Your API key is generated automatically — copy it for your integration setup
API Key Security
- Each API key is tied to a domain. Requests from other domains are rejected.
- Keep your API key private. Don’t commit it to public repositories.
- If your key is compromised, delete the project and create a new one.
Domain Validation
When a request arrives at our API, we check if the request’s origin matches the project’s configured domain. This prevents:
- Using one API key on multiple sites (bypassing project limits)
- Unauthorized use of your API key by third parties
The domain check is flexible:
www.yourdomain.comandyourdomain.comboth match. Subdomains likeblog.yourdomain.comalso match the root domain.
Project Limits
The number of projects you can create depends on your plan:
| Plan | Projects |
|---|---|
| Free | 1 |
| Pro | 3 |
| Business | 10 |
| Enterprise | Unlimited |
Deleting a Project
In your account settings, click the delete icon next to a project. This permanently removes:
- The project and its API key
- All stored bot visit data for that project
This action cannot be undone.