What is Chaptarr [Exposed!]?

Chaptarr [Exposed!] is an add-on for your existing ElfHosted Chaptarr instance that removes Single Sign-On (SSO) protection from the API. With SSO bypassed, external tools and remote clients can authenticate using Chaptarr's native API key, exactly as they would against a Chaptarr running on your own LAN.

Who needs this?

Anyone using external tools against Chaptarr's API: mobile apps like nzb360 and LunaSea (via their Readarr modules), Notifiarr, shared dashboards that aggregate multiple *arr instances, or your own scripts and automations. If you only use Chaptarr through the ElfHosted dashboard or its built-in web UI, you don't need [Exposed!], SSO is already protecting you.

Compatible integrations

• 🔌 Notifiarr, and any third-party tool that authenticates with the Chaptarr (Readarr-compatible) API key
• 📱 Mobile apps like nzb360 and LunaSea that need direct API access
• 🤖 Your own scripts and automations, from anywhere

Security requirements

Because [Exposed!] removes ElfHosted's SSO layer, you must reset Chaptarr's default API key before subscribing. The default key is shared across the platform and cannot be used as a public credential. Generate a fresh API key in Chaptarr's settings, then paste it into the subscription form so we can keep dashboard icons working correctly.

Why ElfHosted?

Most hosted *arr setups force a one-size-fits-all auth model: either everything is behind SSO (breaking external integrations) or nothing is (leaving the API wide open). ElfHosted's [Exposed!] add-ons let you opt specific apps into public API access while keeping SSO on everything else. You get the integration flexibility of self-hosting without exposing your entire stack.

FAQ

Does this expose my entire Chaptarr instance, or just the API?
The whole Chaptarr URL becomes publicly reachable, but Chaptarr's native auth (API key for the API, login for the UI) is the only thing protecting it. Treat the URL as semi-public.

What happens if I forget to reset the API key?
The default key is well-known and shared, so leaving it in place means anyone could control your Chaptarr. We'll prompt you to set a new key during checkout, but this is your responsibility to keep secret.

Can I revert later?
Yes, cancelling the [Exposed!] subscription restores SSO protection.