API
API keys for your own tasks — for automation, integrations and scripts.
You can connect external automation to your tasks (the "Tasks" module) through a simple, key-protected REST API.
Creating a key
In Settings, under "API keys", give the key a name and optionally pick a category — a key scoped to a category only sees tasks in it; without scoping it sees all your tasks. The raw key value is shown exactly once, right after creation — save it right away, it can't be recovered later (you can always create a new one or revoke the old one).
Authentication
Every request must include this header:
Authorization: Bearer <your-key>
Endpoints
All paths start with https://ordiarion.com/api/public/tasks. Task statuses
are TODO or DONE. Creating and deleting tasks is deliberately not part of
this API — those two actions stay in the UI; the key is for checking and
updating what already exists.
| Method | Path | Description |
|---|---|---|
| GET | / |
List tasks (optional status query param) |
| GET | /{id} |
Single task |
| PATCH | /{id}/status |
Change status, body {"status":"DONE"} |
| GET | /{id}/comments |
Task comments |
| POST | /{id}/comments |
New comment, body {"body":"…"} |
A task outside the key's scope (someone else's, or in a different category
than the one the key is scoped to) returns 404, same as one that doesn't
exist at all.
Example
curl -H "Authorization: Bearer <your-key>" \
https://ordiarion.com/api/public/tasks?status=TODO
Revoking
In Settings, next to the key, the "Revoke" button — takes effect immediately and can't be undone. Any automation using that key loses access right away.