API
Ask whether someone owns a tool; grant and revoke access from your own systems.
The full reference, with every schema, is generated from the code at /api/v1/docs; the OpenAPI document is at /api/v1/openapi.json. The version is in the path.
Keys
Made under API in the dashboard, shown once, sent as a bearer token. Test-mode keys act on test data; live keys on real customers. 600 requests a minute per key.
curl https://<your workspace address>/api/v1/tools/<id>/customers/name@example.com \
-H "Authorization: Bearer wk_live_…"Routes
GET /api/v1/tools/{id}/customers/{email} | Does this person own the tool, and how. An address with no account yet still answers for a licence bought under it. |
GET /api/v1/tools/{id}/grants?email= | The address's grants, newest first. |
POST /api/v1/tools/{id}/grants | Grant access: { email, days?, note? }. An unknown address gets an account; the grant is theirs the moment they sign in. |
DELETE /api/v1/tools/{id}/grants/{grantId} | Revoke. The extension stops at its next check. |
Errors
Every error is { "error": { "type", "message", "param"? } }: authentication_error, invalid_request_error (with the field), not_found, rate_limit_error, api_error.