Authentication

Every request needs an API key in the Authorization header. Keys work on the Starter, Professional and Enterprise plans.

Authorization: Bearer convo_...

curl https://www.itsconvo.com/api/v1/conversations \
  -H "Authorization: Bearer $CONVO_API_KEY"

const res = await fetch("https://www.itsconvo.com/api/v1/conversations", {
  headers: { Authorization: `Bearer ${process.env.CONVO_API_KEY}` },
});
const { data } = await res.json();

import os
import requests

resp = requests.get(
    "https://www.itsconvo.com/api/v1/conversations",
    headers={"Authorization": f"Bearer {os.environ['CONVO_API_KEY']}"},
)
data = resp.json()["data"]

Create a key

1. Open the Convo desktop app and go to Settings → Convo API.
2. Click Create key, give the key a name and accept the API Terms of Use.
3. Copy the key. It is shown only once.

• A key is convo_ followed by 32 hex characters. Convo stores only a SHA-256 hash of it, so a lost key can't be shown again. Create a new one.
• Starter allows 1 active key, Professional 3 and Enterprise 10. Each sign-in to the hosted MCP server from Claude, ChatGPT or Cursor also takes a slot.
• All your keys share one rate limit and one budget of AI credits.

Revoke a key

In Settings → Convo API, click Revoke next to the key and confirm. The key stops working at once.

Keep keys on your server

Send requests from your server, not from a browser. The API doesn't allow requests from other websites' pages (CORS), and a key in front-end code is visible to anyone. Read the key from an environment variable and keep it out of your repository.

When authentication fails

Errors use the error format.

Active and trialing subscriptions work. If a renewal is late, access continues for 48 hours after the billing period ends.