OpenAPI specification
Download the complete spec to generate clients, run mocks, or feed to AI
tools.
Base URLs
The API is split across two base URLs, depending on who is calling:Authentication
All endpoints authenticate with a Bearer token in theAuthorization header:
- Public API endpoints use a public API key — safe to use from client-facing servers that start sessions.
- Private API endpoints use a private API key — keep this server-side only.
Errors
Error responses share a common shape:PCC-*) are documented in the
error codes reference.