Developer Docs

Base URL

All API requests are made to this base URL. Responses are always JSON.

Authorization Header

Method 1 — JWT (email/password login)

Authorization: Bearer <accessToken>

Include this header on every protected request. Obtain your token from /api/auth/login.

Method 2 — Personal API Token

Authorization: Bearer tw_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Generate personal API tokens from Profile > API Tokens. Token format: starts with tw_ prefix, 67 characters total. Tokens are stored as SHA-256 hashes; the raw value is shown only once at creation time. Use the same Authorization: Bearer header.

Standard Response Format

{
  "success": true,
  "data": { ... },           // returned resource(s)
  "message": "...",          // optional info/error message
  "pagination": {            // present on paginated lists
    "page": 1,
    "limit": 20,
    "totalCount": 47,
    "totalPages": 3,
    "hasMore": true
  }
}

Roles