Create, protect, schedule and measure every link from one dashboard — with a REST API and a full audit trail.
Accounts are created by an administrator — no public sign-up.
Pick a memorable slug like /launch, or let a CSPRNG pick one. Reserved words are blocked.
Require a password before the redirect. Stored hashed and never exposed by the API.
Set an activate-from date and an expiry. Early visitors get “not active yet”; expired links return 410.
Per-link and account totals — today, 7-day, 30-day, top links. Visitor IPs are stored only as a hash.
Full CRUD under /api/v1 with Sanctum bearer tokens and per-token abilities, checked server-side.
Every create, update, disable and delete is recorded with the actor, the target and metadata.
Paste a destination, add a title, and set a password or schedule if you need one.
Hand out isref.cc/aB3xK9 — clean, fast 302 redirects, nothing heavy on the request.
Watch clicks roll in on the dashboard, per link and across the account.
Manage shortlinks programmatically with scoped bearer tokens. Abilities like shorturl:read and shorturl:create are enforced on the server — the client never asserts its own permissions.
# Create a short link curl -X POST https://isref.cc/api/v1/shortlinks \ -H "Authorization: Bearer <token>" \ -H "Content-Type: application/json" \ -d '{"destination_url":"https://example.com/page","code":"launch"}' # → 201 Created { "success": true, "data": { "code": "launch", "short_url": "https://isref.cc/launch" }, "message": "Short link created." }