LoopList for AI agents
Agents can list and manage a member's sites, apps and newsletters through a small JSON API. The member stays in control: they create the token, choose what it can do, see every action, and can revoke it at any time.
1. Get a token
Log in, open My properties and use Agent access to create a token. It starts with ll_agent_ and is shown once.
2. Call the API
By default a token can add, edit and remove any of your listings. Tick Restrict to listings this agent creates to limit it to its own.
Base URL https://looplist.helixdata.workers.dev/api/v1. Send the token as a bearer header. Machine-readable spec: openapi.json · summary for LLMs: llms.txt.
curl -X POST https://looplist.helixdata.workers.dev/api/v1/properties -H "Authorization: Bearer $LOOPLIST_TOKEN" -H "Content-Type: application/json" -d '{"name":"PromptPilot","url":"promptpilot.ai","categories":["coding","agents"],"description":"Version and test LLM prompts."}'
curl -X PATCH https://looplist.helixdata.workers.dev/api/v1/properties/PROPERTY_ID -H "Authorization: Bearer $LOOPLIST_TOKEN" -H "Content-Type: application/json" -d '{"description":"Version, test and ship LLM prompts with your team."}'
| Method | Path | Scope | What it does |
|---|---|---|---|
| GET | /properties | read | List the member's listings (only its own if restricted). Each listing includes verified, listed, and screenshot_url (a homepage preview, or null until one is taken) |
| POST | /properties | write | Create a listing (name, url, description, categories: 1-2, main first) |
| GET | /properties/{id} | read | Get one listing, with its verification status |
| POST | /properties/{id}/snippet-check | write | Verify the listing: looks for the script in the homepage HTML. 10 an hour |
| PUT / DELETE | /properties/{id}/logo | write | Upload (raw PNG, JPEG or WebP, up to 1 MB, roughly square, at least 32 px; 256 × 256 or larger recommended, 512 × 512 sharpest) or remove the logo |
| GET | /properties/{id}/widgets | read | Promo widget snippets (ticker, card, list) to paste on the site |
| GET | /properties/{id}/install | read | The exact install snippet, where to paste it, and the suggested privacy-policy text |
| GET | /properties/{id}/verification | read | Verification status: verified, listed, and next_step while unverified |
| PATCH | /properties/{id} | write | Edit fields you send. Changing the domain resets verification (unlisted until re-verified). On a verified listing, send "confirm_domain_change": true or you get 409 |
| DELETE | /properties/{id} | write | Remove a listing. The member can restore it from their dashboard for 7 days, then it is deleted for good |
| POST | /properties/{id}/verify | write | Run the verification check now (same as snippet-check) |
| POST | /properties/{id}/dns-check | write | Removed: returns 410 Gone. Use snippet-check |
| GET | /activity?since= | any | Read-only log of this token's own actions, oldest first. Page with next_since |
| GET | /me | any | Token name, scopes and expiry |
3. Verification
Get the one-line script from GET /properties/{id}/install and put it in the site's homepage HTML. Then call POST /properties/{id}/snippet-check: LoopList loads the homepage and looks for the script with that listing's ID. Finding it proves the site is the member's and verifies the listing. Scripts added by a tag manager or JavaScript can't be seen in the page code; the response then includes a contact email for a manual check. Listings aren't promoted until verified, and the script is re-checked daily.
Limits and rules
- By default a token manages all of the member's listings (
properties:manage_all). The opt-inproperties:own_onlyrestriction limits it to listings it created. - Agents can't change the account, link exchange requests, newsletter settings or tokens.
- 60 requests a minute and 20 new listings a day per token.
- Every create, edit, delete and verification check is logged server-side with before and after values. Only the token that made the entries can read them, via
GET /activity; nobody can edit the log. - Listings an agent removes go to "Recently removed by agents" in the member's dashboard and can be restored for 7 days. While removed they're hidden everywhere: directory, newsletter, link exchanges, tracked links and the API.
- Listings show an "Added by agent" badge in the member's dashboard.