Authentication

The QA Note API uses API Key-based authentication. All API requests require a valid API Key.

Base URL

https://qanote.app

Issuing an API Key

Log in to the QA Note dashboard
Navigate to Organization Settings from the left sidebar
Click the API Keys tab
Click the Create New API Key button
Set a name and permissions (Scopes), then create
Store the generated key in a safe place (it cannot be viewed again)

Authorization Header

Include the API Key in the Authorization header of every API request in Bearer token format.

bash

curl https://qanote.app/api/v1/projects \
  -H "Authorization: Bearer qn_YOUR_API_KEY"

Scopes

You can select the required permissions when creating an API Key. If no scopes are specified, all permissions are granted.

Scope	Description
`issues:read`	Read issues, comments, logs, and screenshots
`issues:write`	Change issue status/priority, write comments
`projects:read`	List projects

Rate Limiting

API requests are limited to 60 per minute. Exceeding the limit returns a 429 Too Many Requests response. The limit is enforced per API key or OAuth token, with a secondary per-IP limit to stop credential rotation from bypassing protection.

Request bodies are limited to 64KB for /api/v1 and 256KB for /api/mcp. Larger requests return 413 Payload Too Large.