API
API Overview
Base URL, auth, and conventions.
Base URL:
https://your-domain.comAll API routes live under:
/api/v1GraphQL is available at:
/api/graphqlAuth
Use x-api-key for automation or the web session for UI calls. Admins can disable API tokens globally or per user.
Responses
Most endpoints return JSON objects with data or { message }.
Security
Automations should use x-api-key. Web calls rely on session cookies. If API tokens are disabled, automation routes will reject token auth.
New API sections
- Upload Requests: public upload links and approval queues
- Integrations: outbound webhooks