Hardcount
API endpoints
Hardcount Billing API 2026-04-07
Section titled “Hardcount Billing API 2026-04-07”Open-source usage-based billing engine. Handles pricing, subscriptions, usage metering, invoice generation, Stripe payments, dunning, and credits.
Authentication
Section titled “Authentication”BearerAuth
Section titled “BearerAuth”API key authentication. Use Authorization: Bearer hc_secret_...
Key types: hc_platform_ (tenant mgmt), hc_secret_ (full access)
Security scheme type: http
SessionCookie
Section titled “SessionCookie”Dashboard session cookie, set by POST /v1/auth/login. Routes
under /v1 (except /v1/tenants) accept it in place of a Bearer
key. Operations that list only this scheme (members, mode
switch, logout) do not accept an API key.
Security scheme type: apiKey
Cookie parameter name: hardcount_session
MetricsToken
Section titled “MetricsToken”The value of the METRICS_TOKEN setting, sent as
Authorization: Bearer <token>. Used only by GET /metrics. It is
not an API key.
Security scheme type: http
PostmarkBasicAuth
Section titled “PostmarkBasicAuth”HTTP Basic auth with POSTMARK_WEBHOOK_USER and
POSTMARK_WEBHOOK_PASS. You put both in the webhook URL you give
Postmark. Used only by POST /v1/webhooks/postmark.
Security scheme type: http