API Reference
40+ REST endpoints covering authentication, agent management, AI features, billing, and system health. All endpoints return JSON and require Bearer token authentication in production.
Authentication
API requests in production require a Bearer token set via the API_TOKEN environment variable:
Authorization: Bearer your-api-token
The /api/health endpoint is exempt from authentication. Dashboard access uses session cookies set during login.
Rate Limits
| Scope | Limit | Window |
|---|---|---|
| General API | 120 requests | 1 minute |
| Heavy operations | 10 requests | 1 minute |
Heavy rate limiting applies to: clone-url, media/produce, leads/scrape, batch, grok/query, browser/execute, 3d/scenes, vibe-design/projects.
System
Server health check. Returns uptime, memory usage, version, and environment.
Authentication Endpoints
Authenticate a user. Sets a session cookie and returns a token.
// Request body
{ "email": "[email protected]", "password": "..." }
// Response
{ "token": "session-token", "plan": "pro" }
Get current session info. Returns email and subscription plan.
Invalidate the current session and clear the cookie.
Agents & Skills
List all available agents with metadata (name, model, tier, description).
List all available skills with descriptions and input schemas.
Send a task to the Orchestrator for intelligent routing and execution.
Design System
Get the current DESIGN.md content with reasoning and token layers.
Clone a brand's design system from a URL. Heavy rate limited.
// Request body
{ "url": "https://example.com" }
// Response
{ "design": { "reasoning": {...}, "tokens": {...} } }
Export the design system as DESIGN.md, CSS variables, JSON tokens, or Tailwind config.
Media & 3D
Start a media production job (video, image, audio). Heavy rate limited.
Generate a Blender 3D scene from a text prompt. Heavy rate limited.
Create a new Vibe Design Studio project. Heavy rate limited.
Monetization
Start a lead scraping job for a target industry. Heavy rate limited.
Submit a batch content generation job. Heavy rate limited.
// Request body
{
"type": "blog|social|product|email|seo",
"prompt": "Topic or instructions",
"count": 10 // max: 100
}
AI Queries
Send a real-time query to Grok-3 for live data. Heavy rate limited.
Execute a headless browser task. Heavy rate limited.
Branding
Returns this instance's branding (company name, tagline, logo, colors). Public, no auth required.
Update this instance's branding — theme your own self-hosted dashboard with your company name, logo, and colors. Admin only.
Knowledge Graph
List all knowledge graph entries with metadata.
Add a new entry to the knowledge graph.
Error Responses
All endpoints return standard error objects:
{
"error": "Description of what went wrong"
}
| Status | Meaning |
|---|---|
400 | Bad Request — Missing or invalid parameters |
401 | Unauthorized — Missing or invalid API token |
403 | Forbidden — Valid token but insufficient permissions |
404 | Not Found — Resource does not exist |
429 | Too Many Requests — Rate limit exceeded |
500 | Server Error — Unexpected failure |