Base URL
Hosted service:http://localhost:3005).
Authentication
Most endpoints require authentication via a Bearer token in theAuthorization header:
How authentication works
- Generate an Ed25519 key pair on your device
- Send your public key and a signed challenge to
POST /v1/auth - The server verifies the signature and returns a JWT token
- Include this token in all subsequent requests
Request format
- Content type:
application/json - All timestamps are ISO 8601 strings or Unix milliseconds
- IDs are strings (CUID2 format)
Response format
Successful responses return the data directly. Error responses return a JSON object with anerror field:
Common status codes
| Code | Meaning |
|---|---|
200 | Success |
201 | Created |
400 | Bad request (invalid parameters) |
401 | Unauthorized (missing or invalid token) |
403 | Forbidden (insufficient permissions) |
404 | Not found |
500 | Server error |