Authentication

API key

All requests require the Authorization header.

Get your key

Open the partner cabinet and go to Tools -> API (partners.onlytraffic.com/tools/api). The page lists your keys: up to 5 active keys per account, each with a name.Click Create key and choose a name, an access level (Full or Read-only) and an expiry (30, 90, 180 or 365 days, or never). The key is shown once, right after creation: copy it immediately. Later the page shows only its prefix (ot_partners_ab12…), access level, expiry and last use.Keys look like ot_partners_ followed by 40 hex characters. You can revoke a key at any time: integrations using it stop working immediately, and revoking frees one of the 5 slots.If your account still has an older single key (format XXXXX-XXXXX-XXXXX-XXXXX), it is listed on the same page as Legacy key. It keeps working with full access until you delete it there.

Add the header

Include the key in every request:

Authorization: your-api-key-here

The Bearer form is accepted too:

Authorization: Bearer your-api-key-here

A Full key reads your data and can start and stop campaigns. Keep every key secret; use a Read-only key for integrations that only need to read.

AI assistants

Keys are also what AI assistants use. When you connect Claude or ChatGPT to your account, you pick one of these keys (or create a new one) on the consent page, without pasting it anywhere. The assistant gets exactly that key’s access level, and revoking the key disconnects it. See AI assistants.

Access levels

Access	What the key can do
Full	Every endpoint, reads and writes
Read-only	Every `GET` endpoint. Calls to the write endpoints (`POST`) answer `error_code` `403` with the message `This API key is read-only`

Expired or revoked keys are rejected like unknown keys: error_code 403, message Error! Access denied. Rate limits are per account, not per key: all keys of an account share the same 120 reads / 30 writes per minute.

Base URL

https://partners.onlytraffic.com

Example request

curl "https://partners.onlytraffic.com/api/marketer/revshare/campaigns?limit=10" \
  -H "Authorization: your-api-key-here"

import requests

response = requests.get(
    "https://partners.onlytraffic.com/api/marketer/revshare/campaigns",
    params={"limit": 10},
    headers={"Authorization": "your-api-key-here"}
)
data = response.json()

const response = await fetch(
  "https://partners.onlytraffic.com/api/marketer/revshare/campaigns?limit=10",
  {
    headers: { "Authorization": "your-api-key-here" }
  }
);
const data = await response.json();

Rate limits

Limits apply per account and are shared by all its keys: 120 requests per minute for read endpoints and 30 per minute for write endpoints. When you hit a limit the response carries error_code 429 and a Retry-After header with the number of seconds to wait.

Errors

All responses return HTTP 200. Check the status field for the actual result.

403 — Access denied

Error code	Description
`403`	The key is missing, unknown, expired or revoked, or the account is not an active partner (`Error! Access denied`). Also returned when a Read-only key calls a write endpoint (`This API key is read-only`)

404 — Not found

Error code	Description
`404`	The campaign or order does not exist or is not yours

422 — Invalid parameters

Error code	Description
`422`	Request contains invalid or missing parameters. `message` says what is wrong

429 — Rate limit

Error code	Description
`429`	Too many requests — wait for `Retry-After` seconds and retry. Also returned when another campaign start is still running for your account

500 — Server error

Error code	Description
`500`	Something went wrong on our side. Retry later

503 — Service temporarily unavailable

Error code	Description
`503`	A write proxied to the platform timed out. Retry later. The action may still have been applied: check with the matching read endpoint before repeating a campaign start

Overview

Platforms

Work Formats

Payments & Safety

API

API key

AI assistants

Access levels

Base URL

Example request

Rate limits

Errors

​API key

​AI assistants

​Access levels

​Base URL

​Example request

​Rate limits

​Errors

API key

AI assistants

Access levels

Base URL

Example request

Rate limits

Errors