REST API

AUTHENTICATION

Create an API key in your account settings and send it as a Bearer token. Keys are hashed on the server and shown exactly once.

SCOPES

Every key carries explicit scopes. A request without the matching scope is rejected with 403.

• -bots:read – list bots and read their status
• -bots:control – start, stop and restart processes
• -bots:logs – read process logs

ENDPOINTS

All responses are JSON and contain an ok flag. Only products owned by the key's user are visible.

RATE LIMITS

Requests are limited per key and minute. Every response carries the remaining budget in the X-RateLimit-Remaining header; exceeding it returns 429.

ERRORS

Errors return the HTTP status plus a stable error code and a human readable message, for example UNAUTHENTICATED, SCOPE, RATE_LIMIT or PRODUCT_NOT_FOUND.

ENDPOINTS

60 req/min · X-RateLimit-Remaining