Base URL
Authentication
Every request requires a Bearer API key:Conventions
- JSON everywhere — send
Content-Type: application/json; responses are JSON. - IDs are opaque strings; don’t parse them.
- Timestamps are ISO-8601 UTC.
- Errors use standard status codes with an
{ "error": "…" }body — see Error handling. - Idempotency — pass a
client_idon sends to make retries safe.

