Public API

Automate everything that repeats.

REST API and webhooks for every mekyn endpoint — content, SEO reports, leads, builds, domain actions. Build your own tools, sync to Notion or Slack, or use mekyn as the backend of your stack.

Six building blocks for automation

  • REST API

    Fully documented REST endpoints for CRUD on Sites, Pages, Blocks, Domains, Leads — JSON in, JSON out.

  • Webhooks

    Events: site.published, lead.received, seo.report.ready, backlink.detected, social.posted — signed with HMAC-SHA256.

  • OAuth 2.0

    Token-based authentication with scopes (read:sites, write:pages, manage:leads). Token rotation per click.

  • Rate Limits Transparent

    1,000 requests/hour in Business plan, 10,000 in Enterprise. Header X-RateLimit-* shows remaining quota.

  • OpenAPI Specification

    Full OpenAPI 3.1 spec — automatically generates type-safe clients in TypeScript, Python, Go, Ruby.

  • GraphQL (Roadmap)

    GraphQL endpoint planned for Q4 2026. REST stays available in parallel — no breaking changes.

Example workflows.

Four use cases our beta testers are already running.

Example · cURL

curl https://api.mekyn.com/v1/sites \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json"

# {
#   "data": [
#     { "id": "smith-plumbing", "domain": "smithplumbing.com", "status": "live" },
#     { "id": "dr-jones-clinic", "domain": "drjonesclinic.com", "status": "live" }
#   ],
#   "meta": { "total": 2, "page": 1 }
# }

Frequently Asked Questions

  • In which plans is the API included?

    Read-only access from Professional plan. Write access and webhooks from Business plan. Higher rate limits and SLA from Enterprise.

  • Where do I find the documentation?

    The OpenAPI spec is at <a href="https://api.mekyn.com/openapi.json" class="underline">api.mekyn.com/openapi.json</a>, interactive docs at <a href="https://docs.mekyn.com/api" class="underline">docs.mekyn.com/api</a>. Both endpoints are in build — early access goes through personal onboarding.

  • Are webhooks reliable?

    Yes. On error response (>=500 or timeout) we retry with exponential backoff up to 24 hours. Failed payloads land in a dead letter queue you can view in the dashboard.

  • What about rate limits?

    Business: 1,000/h. Enterprise: 10,000/h, individual increases possible. Headers X-RateLimit-Limit / X-RateLimit-Remaining / X-RateLimit-Reset show status. On exceed: HTTP 429 with Retry-After.

  • Is the API GDPR-compliant?

    Yes. All endpoints run exclusively on US/EU servers (configurable). Audit logs of all API calls are kept 90 days. Personal data in webhook payloads is encrypted at-rest.

Ready for API access?

Included from Business plan. Early access to new endpoints through personal onboarding.