Skip to main content

Base URL

All API endpoints are prefixed with /api/v1/ or /api/auth/.

Authentication

Authenticated endpoints require a Bearer token in the Authorization header:
API keys have the format sh_live_ followed by 32 hex characters. See Authentication for how to get one. Some endpoints work without authentication (anonymous publishing), but with limitations.

Content Type

All request bodies must be JSON:

Response Format

All responses return JSON. Successful responses include the relevant data. Error responses follow a consistent format:
See Errors for all error codes.

Rate Limiting

Every API response includes rate limit headers:
See Rate Limits for limits per plan.

Endpoints

Publishing

Management

Secure Browser Requests

Account

Handle

Billing

Authentication