Authentication

Authenticate with the MyChronos API using API keys or OAuth 2.0. All requests must be made over HTTPS.

Overview

The MyChronos REST API is available at https://api.mychronos.app/v1. All requests must be authenticated and made over HTTPS.

API Keys

Generate an API key at /settings/api.

Usage

Include the key in the Authorization header:

curl https://api.mychronos.app/v1/time-entries \
  -H "Authorization: Bearer YOUR_API_KEY"

⚠️

Keep your key secret

API keys have full access to your workspace. Never commit them to version control or expose them in client-side code.

OAuth 2.0

For integrations that act on behalf of users, use OAuth 2.0.

Register your application

Go to /settings/oauth-apps/new and provide your redirect URI.

Redirect to authorization

https://app.mychronos.app/oauth/authorize
  ?client_id=YOUR_CLIENT_ID
  &redirect_uri=YOUR_REDIRECT_URI
  &response_type=code
  &scope=time:read time:write invoices:read

Exchange code for token

curl -X POST https://api.mychronos.app/oauth/token \
  -d grant_type=authorization_code \
  -d code=AUTHORIZATION_CODE \
  -d client_id=YOUR_CLIENT_ID \
  -d client_secret=YOUR_CLIENT_SECRET \
  -d redirect_uri=YOUR_REDIRECT_URI

Available Scopes

OAuth scopes

time:readscopeoptional

Read time entries

time:writescopeoptional

Create and update time entries

invoices:readscopeoptional

Read invoices and payment status

invoices:writescopeoptional

Create and send invoices

reports:readscopeoptional

Access reporting data

team:readscopeoptional

List team members and their roles