Base URL
Request Format
- Use
Content-Type: application/jsonfor request bodies - Include authentication credentials with every request (see Authentication)
- URL path parameters are denoted with
{paramName}in the endpoint documentation
Example Request
Response Format
All successful responses return JSON. The structure depends on the endpoint:Authentication Methods
See Authentication for full details.
API Sections
Authentication
Session cookies, API keys, and public endpoints.
Errors & Status Codes
Error format, HTTP codes, and handling patterns.
Rate Limiting
Request limits, widget quotas, and backoff strategies.
Endpoint Reference
Browse individual endpoint documentation generated from the OpenAPI spec.
Key Endpoint Groups
Two surfaces exist and they authenticate differently — check which one an endpoint belongs to before writing an integration: API-key surface (/api/v1/*) — the endpoints an external integration can call with Authorization: Bearer <your-api-key>. Write access additionally requires the api_v1_write plan feature.
Session surface — these require a signed-in browser session, not an API key. They power the IllumiChat app itself; an API key will be rejected.
Public / unauthenticated — no credentials, scoped to one assistant or used by providers.