Skip to main content

Base URL

All API endpoints are prefixed with /v1:
https://yourdomain.com/v1

Authentication

The API uses Bearer token authentication (Laravel Sanctum). Include the token in every protected request:
Authorization: Bearer your_api_token_here
Tokens are obtained via the login endpoint.

Rate limits

Endpoint groupLimit
Login5 requests / minute
Registration10 requests / minute
Password reset3 requests / minute
Promo validation10 requests / minute
Ticket creation / replies10 requests / minute
Email re-verification6 requests / minute
All other endpoints60 requests / minute
When a rate limit is exceeded, the API returns 429 Too Many Requests.

Versioning

The current API version is v1. The version prefix is part of the URL path. Breaking changes will increment the version number.