Base URL
- Cloud
- Self-hosted
Authentication
All API requests require a Bearer token in theAuthorization header. You can use a session token or an API key.
Organization context
Most endpoints require anX-Organization-Id header to scope the request to a specific organization.
Rate limiting
API requests are rate-limited to 1,000 requests per hour per API key. When you hit the limit, the API returns429 Too Many Requests with a Retry-After header.
Response format
All responses are JSON. Successful responses return a2xx status code. Errors return a 4xx or 5xx status code with a JSON body containing an error field.