Skip to main content

Base URL

Authentication

All endpoints require a Bearer API key and a whitelisted source IP:
See Authentication.

Encrypted payloads

Request bodies on POST/PUT endpoints must be AES-256-CBC encrypted and sent as { "content": "...", "iv": "..." }. Response data fields are encrypted to your Ed25519 public key.For readability, every example in this reference shows the plain (decrypted) payloads. On the wire, both are encrypted. See the Encryption guide, or use an official SDK which handles it transparently.

Endpoints at a glance

Rate limits

20 requests per 60 seconds per API key. Exceeding it blocks the key for 60 seconds with a 429. See Rate Limiting.