# API-Schlüssel und IP-Allowlist

> LocalSERP Proxy API: API-Schlüssel mit Berechtigungsbereichen und IP-Allowlist (bis zu 10 IPs) für den Proxy-Zugriff ohne Passwort, mit Beispielen für curl, Python und Node.js.

- URL: https://localserpproxy.com/de/docs/api/api-keys/
- Zuletzt aktualisiert: 2026-10-15
- Publisher: LocalSERP Proxy (https://localserpproxy.com)

Erstelle und widerrufe API-Schlüssel mit eingeschränkten Berechtigungen und verwalte die IP-Allowlist: Bis zu 10 Quell-IPs dürfen die Proxys ohne Benutzername und Passwort nutzen.

**Endpunkte auf dieser Seite**

- `GET /v1/api-keys`: API-Schlüssel auflisten
- `POST /v1/api-keys`: API-Schlüssel erstellen
- `DELETE /v1/api-keys/{keyId}`: API-Schlüssel widerrufen
- `GET /v1/ip-whitelist`: IP-Allowlist auflisten
- `POST /v1/ip-whitelist`: IP oder IP-Bereich zur Allowlist hinzufügen
- `DELETE /v1/ip-whitelist/{entryId}`: Eintrag aus der Allowlist entfernen

Basis-URL `https://localserpproxy.com/api/v1`. Authentifizierung, Fehler und Limits: siehe [API-Übersicht](https://localserpproxy.com/de/docs/api/).

## API-Schlüssel auflisten

`GET /v1/api-keys`

Authentifizierung: API-Schlüssel im Header `Authorization: Bearer API_KEY`.

**Antwort** `200 OK`

```json
{
  "data": [
    {
      "id": "key_5n2v8q",
      "name": "Rotation script",
      "prefix": "pk_4f9a2c",
      "scopes": [
        "read",
        "proxies"
      ],
      "createdAt": "2026-10-05T14:03:11Z",
      "lastUsedAt": null
    }
  ],
  "limit": 20
}
```

*curl*

```bash
curl -s "https://localserpproxy.com/api/v1/api-keys" \
  -H "Authorization: Bearer $API_KEY"
```

*Python*

```python
import os
import requests

API = "https://localserpproxy.com/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['API_KEY']}"}

r = requests.get(f"{API}/api-keys", headers=HEADERS, timeout=30)
r.raise_for_status()
print(r.json())
```

*Node.js*

```javascript
// Node.js 18+ (built-in fetch), ES module
const API = 'https://localserpproxy.com/api/v1';

const res = await fetch(`${API}/api-keys`, {
  headers: { Authorization: `Bearer ${process.env.API_KEY}` },
});
if (!res.ok) throw new Error((await res.json()).error?.message ?? `HTTP ${res.status}`);
console.log(await res.json());
```

## API-Schlüssel erstellen

`POST /v1/api-keys`

Der volle `secret` wird einmal zurückerstattet.

Authentifizierung: API-Schlüssel im Header `Authorization: Bearer API_KEY`.

**Anfragetext**

| Feld | Typ | Erforderlich | Beschreibung |
| --- | --- | --- | --- |
| `name` | string | Ja | max. 60 Zeichen |
| `scopes` | array of `read` · `proxies` · `billing` | Ja | — |

*Beispiel*

```json
{
  "name": "Rotation script",
  "scopes": [
    "read",
    "proxies"
  ]
}
```

**Antwort** `201 Created`

```json
{
  "id": "key_5n2v8q",
  "name": "Rotation script",
  "prefix": "pk_4f9a2c",
  "scopes": [
    "read",
    "proxies"
  ],
  "createdAt": "2026-10-05T14:03:11Z",
  "lastUsedAt": null,
  "secret": "pk_4f9a2c8e1b7d3f6a9c2e5b8d1f4a7c0e"
}
```

*curl*

```bash
curl -s -X POST "https://localserpproxy.com/api/v1/api-keys" \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"Rotation script","scopes":["read","proxies"]}'
```

*Python*

```python
import os
import requests

API = "https://localserpproxy.com/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['API_KEY']}"}

r = requests.post(f"{API}/api-keys", headers=HEADERS, json={"name": "Rotation script", "scopes": ["read", "proxies"]}, timeout=30)
r.raise_for_status()
print(r.json())
```

*Node.js*

```javascript
// Node.js 18+ (built-in fetch), ES module
const API = 'https://localserpproxy.com/api/v1';

const res = await fetch(`${API}/api-keys`, {
  method: 'POST',
  headers: { Authorization: `Bearer ${process.env.API_KEY}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ name: 'Rotation script', scopes: ['read', 'proxies'] }),
});
if (!res.ok) throw new Error((await res.json()).error?.message ?? `HTTP ${res.status}`);
console.log(await res.json());
```

## Einen API-Schlüssel widerrufen

`DELETE /v1/api-keys/{keyId}`

Authentifizierung: API-Schlüssel im Header `Authorization: Bearer API_KEY`.

**Parameter**

| Name | In | Typ | Erforderlich | Beschreibung |
| --- | --- | --- | --- | --- |
| `keyId` | path | string | Ja | — |

**Antwort** `204 No Content`

Kein Anfragetext: Der Statuscode ist die Antwort.

*curl*

```bash
curl -s -X DELETE "https://localserpproxy.com/api/v1/api-keys/key_5n2v8q" \
  -H "Authorization: Bearer $API_KEY"
```

*Python*

```python
import os
import requests

API = "https://localserpproxy.com/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['API_KEY']}"}

r = requests.delete(f"{API}/api-keys/key_5n2v8q", headers=HEADERS, timeout=30)
r.raise_for_status()
print(r.status_code)  # 204: done
```

*Node.js*

```javascript
// Node.js 18+ (built-in fetch), ES module
const API = 'https://localserpproxy.com/api/v1';

const res = await fetch(`${API}/api-keys/key_5n2v8q`, {
  method: 'DELETE',
  headers: { Authorization: `Bearer ${process.env.API_KEY}` },
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(res.status); // 204: done
```

## Die IP-Allowlist auflisten

`GET /v1/ip-whitelist`

Authentifizierung: API-Schlüssel im Header `Authorization: Bearer API_KEY`.

**Antwort** `200 OK`

```json
{
  "data": [
    {
      "id": "ipw_8c1k2m",
      "cidr": "203.0.113.24",
      "label": "Office server",
      "createdAt": "2026-10-05T14:03:11Z"
    }
  ],
  "limit": 10
}
```

*curl*

```bash
curl -s "https://localserpproxy.com/api/v1/ip-whitelist" \
  -H "Authorization: Bearer $API_KEY"
```

*Python*

```python
import os
import requests

API = "https://localserpproxy.com/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['API_KEY']}"}

r = requests.get(f"{API}/ip-whitelist", headers=HEADERS, timeout=30)
r.raise_for_status()
print(r.json())
```

*Node.js*

```javascript
// Node.js 18+ (built-in fetch), ES module
const API = 'https://localserpproxy.com/api/v1';

const res = await fetch(`${API}/ip-whitelist`, {
  headers: { Authorization: `Bearer ${process.env.API_KEY}` },
});
if (!res.ok) throw new Error((await res.json()).error?.message ?? `HTTP ${res.status}`);
console.log(await res.json());
```

## Eine IP-Adresse oder einen IP-Bereich zur Allowlist hinzufügen

`POST /v1/ip-whitelist`

Akzeptiert eine IPv4-Adresse, einen IPv4-CIDR-Bereich von /24 bis /32, eine IPv6-Adresse oder einen IPv6-CIDR-Bereich von /48 bis /128. Private, Loopback- und reservierte Bereiche werden abgelehnt (`422`). Innerhalb von 60 s am Gateway aktiv.

Authentifizierung: API-Schlüssel im Header `Authorization: Bearer API_KEY`.

**Anfragetext**

| Feld | Typ | Erforderlich | Beschreibung |
| --- | --- | --- | --- |
| `cidr` | string | Ja | — |
| `label` | string | Nein | max. 60 Zeichen |

*Beispiel*

```json
{
  "cidr": "203.0.113.24",
  "label": "Office server"
}
```

**Antwort** `201 Created`

```json
{
  "id": "ipw_8c1k2m",
  "cidr": "203.0.113.24",
  "label": "Office server",
  "createdAt": "2026-10-05T14:03:11Z"
}
```

*curl*

```bash
curl -s -X POST "https://localserpproxy.com/api/v1/ip-whitelist" \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"cidr":"203.0.113.24","label":"Office server"}'
```

*Python*

```python
import os
import requests

API = "https://localserpproxy.com/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['API_KEY']}"}

r = requests.post(f"{API}/ip-whitelist", headers=HEADERS, json={"cidr": "203.0.113.24", "label": "Office server"}, timeout=30)
r.raise_for_status()
print(r.json())
```

*Node.js*

```javascript
// Node.js 18+ (built-in fetch), ES module
const API = 'https://localserpproxy.com/api/v1';

const res = await fetch(`${API}/ip-whitelist`, {
  method: 'POST',
  headers: { Authorization: `Bearer ${process.env.API_KEY}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ cidr: '203.0.113.24', label: 'Office server' }),
});
if (!res.ok) throw new Error((await res.json()).error?.message ?? `HTTP ${res.status}`);
console.log(await res.json());
```

## Einen Eintrag aus der Allowlist entfernen

`DELETE /v1/ip-whitelist/{entryId}`

Authentifizierung: API-Schlüssel im Header `Authorization: Bearer API_KEY`.

**Parameter**

| Name | In | Typ | Erforderlich | Beschreibung |
| --- | --- | --- | --- | --- |
| `entryId` | path | string | Ja | — |

**Antwort** `204 No Content`

Kein Anfragetext: Der Statuscode ist die Antwort.

*curl*

```bash
curl -s -X DELETE "https://localserpproxy.com/api/v1/ip-whitelist/ipw_8c1k2m" \
  -H "Authorization: Bearer $API_KEY"
```

*Python*

```python
import os
import requests

API = "https://localserpproxy.com/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['API_KEY']}"}

r = requests.delete(f"{API}/ip-whitelist/ipw_8c1k2m", headers=HEADERS, timeout=30)
r.raise_for_status()
print(r.status_code)  # 204: done
```

*Node.js*

```javascript
// Node.js 18+ (built-in fetch), ES module
const API = 'https://localserpproxy.com/api/v1';

const res = await fetch(`${API}/ip-whitelist/ipw_8c1k2m`, {
  method: 'DELETE',
  headers: { Authorization: `Bearer ${process.env.API_KEY}` },
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(res.status); // 204: done
```

---

LocalSERP Proxy: LocalSERP Proxy ist ein US-Residential-Proxy-Dienst zur stadtweisen Prüfung lokaler Suchergebnisse, Anzeigen und Preise, mit Kryptozahlung und ohne Hochladen eines Ausweisdokuments.