Public endpoints
Authenticated endpoints
Auth convention
Protected API-key endpoints use:X-API-Key for the current protected registration route unless the backend adds support for it.
Error convention
Most validation failures return JSON with a top-levelmessage and an errors object:
error string instead:
Rate limits
Public API routes currently return standard rate-limit headers such asx-ratelimit-limit and x-ratelimit-remaining. Observed limits:
When a route returns
429, back off and keep the original request. Do not retry paid or signing actions automatically.