Authenticated API keys on show.fm

In July we opened a public, read-only API for everything you have already published. It needs no key, and it is what the embeddable player runs on. The same API can now read your own data too: drafts and scheduled episodes, show notes, the people on each episode, transcripts and your download analytics. Use it to feed a dashboard, a spreadsheet, a sponsor report or your own website. We wrote about why we built it on our blog.

Create a key in Settings. Go to Settings → API keys, name the key, choose what it can read and which podcasts it covers, and pick when it expires: 30, 90 or 180 days, or one year. The key is shown once, so store it somewhere safe. Every paid plan includes the API. API keys.

curl https://api.show.fm/v1/me \
  -H "Authorization: Bearer $SHOWFM_API_KEY"

Choose what each key can read.

• Podcasts: the podcasts the key can reach.
• Episodes: every episode, including drafts and scheduled ones, with show notes as plain text and as cleaned-up HTML, the people on the episode and its credits. Links to an episode's audio and artwork appear only once it is public.
• Transcripts: each transcript, line by line, with speaker names.
• Analytics: the download figures from Analytics in the app. Downloads over time and per episode, by app, country, device, source or referrer, and your Apple Podcasts and Spotify imports. Every downloads answer says which dates it covers and which days are final. Analytics API guide.

Your plan and your role still apply. A key never reaches more than you can see in the app. Analytics are for podcast owners only, and go back as far as your plan's history: one year on Creator, all of it on Studio and above. Apple and Spotify imports need Studio or above. A Co-host's key sees only the episodes they are on, and if you remove a team member, their keys stop reaching its podcasts straight away. Owners see every key that includes their podcast in Podcast Settings → API access, and can cut them all off that podcast or stop team members' keys reaching it at all.

Safe by default. Keys are read-only, so nothing can be published, edited or deleted through one. Every key expires. Web browsers are refused, so a key cannot be used from a web page: keep it on a server. We email you when a key is created, rolled or given more access, a week before one expires, and when a key that has been in use turns up on a new network. Roll gives a key a new secret and keeps its name, permissions and podcasts, and changing or resetting your password revokes every key at once. Keep keys safe.

Find the IDs you need. Settings → API keys lists your podcast IDs with a copy button, and every episode has Copy episode ID in its More episode actions menu. Find your podcast and episode IDs.

The same v1 contract. Your own data lives under https://api.show.fm/v1/me. The public endpoints have not changed and still need no key. The API reference covers every endpoint, with examples in curl, TypeScript, JavaScript, Python and PHP, and the OpenAPI file describes the whole API. The versioning policy is the contract.