What is Lidarr [Exposed!]?

Lidarr [Exposed!] is an add-on for your existing ElfHosted Lidarr instance that removes Single Sign-On (SSO) protection from the API. With SSO bypassed, external tools and remote clients can authenticate using Lidarr's native API key — exactly as they would against a self-hosted Lidarr on your own LAN.

Who needs this?

Anyone integrating Lidarr with external music tools — Headphones-style trackers, custom importers, mobile apps that browse Lidarr remotely, or unified dashboards alongside Sonarr and Radarr. If you're only using Lidarr through the ElfHosted dashboard or its built-in web UI, you don't need [Exposed!] — SSO is already protecting you.

Compatible integrations

• 🔌 Profilarr, Recyclarr, Notifiarr, MusicSeerr, Navidrome import workflows
• 🤝 Any third-party tool that authenticates with the Lidarr API key
• 📱 Mobile apps like nzb360, LunaSea, and nzbget that need direct API access

Security requirements

Because [Exposed!] removes ElfHosted's SSO layer, you must reset Lidarr's default API key before subscribing. The default key is shared across the platform and cannot be used as a public credential. Generate a fresh API key in Lidarr's settings, then paste it into the subscription form so we can keep dashboard icons working correctly.

Why ElfHosted?

Most hosted *arr setups force a one-size-fits-all auth model — either everything is behind SSO (breaking external integrations) or nothing is (leaving the API wide open). ElfHosted's [Exposed!] add-ons let you opt specific apps into public API access while keeping SSO on everything else. You get the integration flexibility of self-hosting without exposing your entire stack.

FAQ

Does this expose my entire Lidarr instance, or just the API?
The whole Lidarr URL becomes publicly reachable, but Lidarr's native auth (API key for the API, login form for the UI) is the only thing protecting it. Treat the URL as semi-public.

What happens if I forget to reset the API key?
The default key is well-known and shared — leaving it in place means anyone could control your Lidarr. We'll prompt you to set a new key during checkout, but this is your responsibility to keep secret.

Can I revert later?
Yes — cancelling the [Exposed!] subscription restores SSO protection.