Authentication
API keys, connected apps and the two permissions.
Set up with your AI assistant
Paste the prompt into Claude Code. It includes setup steps and a read-only connection check.
API keys
Create a key in any connector’s setup popup or in Connectors → API keys. Keys start with la_. Choose an expiration (90 days by default) or Never expires. Advanced settings control permissions, lead credits per task, requests per minute and task starts or replies per minute. Account limits still apply; the task cap does not limit the key’s total usage. Only a digest is stored, and keys can be revoked or deleted.
X-API-Key: la_…
# Or, when the client supports bearer credentials:
Authorization: Bearer la_…Revocation through another backend process can take up to 30 seconds to reach a cached key. Revocation does not stop work already started.
Permissions
| Scope | Name | Allows |
|---|---|---|
| leads:read | Read | Check tasks, read saved leads and see account credits. |
| leads:write | Start and change work | Start tasks, send replies, run tools, stop work and share saved leads. |
Every task, result and credit belongs to the account that owns the key or connection.
Connected apps
Apps that support sign-in (Claude.ai, ChatGPT) connect with OAuth: you sign in to LeadsAgent and approve access. Disconnect them in Connectors → Connected. Disconnecting does not stop tasks already running.