Version: 1.0.0

todo.ac API

RESTful API for TodoMate — manage todos, goals, and vision with GitHub-backed storage.

Authentication

All requests require two credentials passed as headers:

Header	Value
Authorization	Bearer <jwt> — obtain from /auth/token or /auth/refresh. Not required on auth endpoints.
TodoMate-Api-Key	Your API subscription key — obtain from Account → API Keys in the app (Pro plan required)

Authentication

HTTP: Bearer Auth

TodoMate JWT (issued by /auth/token or /auth/refresh)

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer

API Key: ApiKey

Subscription key from Account → API Keys (Pro plan required). Required alongside the Bearer JWT on all authenticated endpoints.

Security Scheme Type:	apiKey
Header parameter name:	TodoMate-Api-Key