Reverse engineer the Discourse API says Anything you can do on the site you can also do using the JSON api. Alas, https://docs.discourse.org/ Some endpoints do not require any authentication, pretty much anything else will require you to be authenticated. To become authenticated you will need…

[image] Reverse engineer the Discourse API Integrations Discourse is backed by a complete JSON api. Anything you can do on the site you can also do using the JSON api. The API is documented at docs.discourse.org . You can also use the discourse_api Ruby gem as …

Update openapi.yml by jidanni · Pull Request #72 · discourse/discourse_api_docs · GitHub says However, without support from admins and an approved endpoint in the user api keys site settings “regular users” still can’t just generate their own api keys.

That response is incorrect. Any user can generate a user API key if the generation of user API keys is enabled for the user’s trust level. If you don’t set a redirect in the request payload it will display a base64 encoded response in the browser that contains the key. See this topic for a script t…

I’m thinking for the default case where person A has installed Discourse, and person B is just a simple user on person A’s Discourse, and A has not changed any admin settings, could B still do much with the API?

The User API key generation is enabled for all users by default, and anything you can do through the web interface you can do through the API because the web interface is just a frontend to the API. I personally use it in an extension in Chrome that keeps a running total of all my unread notificati…

Allow API use by regular users, not just admins

Development

blake (Blake Erickson) February 14, 2023, 9:16pm 7

If a user has an account on a Discourse instance already they should be able to use their same cookie authentication from the browser in any non-browser api requests.

Topic		Replies	Views
User API keys specification Integrations rest-api , reference	69	38178	September 22, 2025
Create apikey for user programmatically as admin Development rest-api	8	2169	February 26, 2024
Can non-admin user issue their own API key? Development rest-api	13	2989	September 2, 2021
Generating User Api Keys with REST API Development rest-api	20	9020	April 8, 2018
"Api-Key" and "Api-Username" for try.discourse.org? Development rest-api	12	1466	February 4, 2025

Allow API use by regular users, not just admins

Related topics