Developer API

Built for Integration

Generate memorable, secure passwords from your applications. One API call. Millisecond response times.

Quick Start View Pricing

<50ms Avg Response

99.9% Uptime SLA

REST API Standard

Everything You Need

Production-ready API with enterprise features.

Simple REST API

One endpoint, one call. Generate memorable passwords in milliseconds with a simple POST request.

Enterprise Security

TLS 1.3, API key authentication, and rate limiting. Built for production workloads.

Usage Analytics

Real-time dashboard showing generations, latency, and quota usage.

SDK Ready

Official SDKs for JavaScript, Python, and Go. Or use our REST API directly.

Quick Start

Get your first password in under a minute.

Get API Key

Make Request

Call the generate endpoint with your filters.

Use Response

Parse the JSON response and use the password.

Code Examples

Copy, paste, and customize.

curl -X POST https://api.usestorypass.com/v1/generate \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "count": 1,
    "filters": {
      "excludeCopyrighted": false,
      "excludeMature": true
    }
  }'

Response

{
  "success": true,
  "components": [
    {
      "character": {
        "id": "hp-001",
        "name": "Harry Potter",
        "normalized": "HarryPotter"
      },
      "action": {
        "id": "act-042",
        "name": "Casts Spell",
        "normalized": "CastsSpell"
      },
      "place": {
        "id": "loc-015",
        "name": "Hogwarts",
        "normalized": "Hogwarts"
      }
    }
  ],
  "meta": {
    "entropy_bits": 36.2,
    "request_id": "req_abc123"
  }
}

API Reference

Everything you need to integrate StoryPass.

POST /v1/generate

Request Body

Parameter	Type	Required	Description
`count`	integer	No	Number of passwords (1-10, default: 1)
`filters.excludeCopyrighted`	boolean	No	Exclude copyrighted characters
`filters.excludeMature`	boolean	No	Exclude mature/adult content
`filters.categories`	string[]	No	Limit to specific categories

Headers

Header	Value	Required
`Authorization`	Bearer YOUR_API_KEY	Yes
`Content-Type`	application/json	Yes

Rate Limits

Generous limits for every use case.

Plan	Price	Requests	Window	Burst Limit
Free (B2C)	$0	10/day	daily	-
Pro (B2C)	$15/year	Unlimited	-	100/min
API (B2B)	$0.10/gen	1,000	per minute	5,000/min
Teams (B2B)	$20/seat/year	10,000/seat	per month	500/min

Rate limit headers included in every response: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset

Authentication

All API requests require authentication via Bearer token. Include your API key in the Authorization header.

Authorization: Bearer sp_live_abc123...

Key Types

Test keys (sp_test_) — Free, limited to 100 requests/day
Live keys (sp_live_) — Production use, counted against quota

Get Your API Key

Security Best Practices

Never expose API keys in client-side code
Use environment variables for key storage
Rotate keys periodically
Use test keys during development
Monitor usage in the dashboard

Ready to Integrate?

Get started with our API in minutes. Test keys available instantly.

Get API Key View Pricing