Guides

These guides cover the cross-cutting concerns that apply to every endpoint in the API:

JWT

Authentication

Authorization: Bearer … on every protected request.

Conventions

IDs and timestamps

Stable public IDs and the ISO-8601 timestamp format used everywhere.

Safe retries

Idempotency

Make writes safe to retry with Idempotency-Key.

Standard headers

Rate limits

Sliding-window limits exposed via RateLimit-* headers.

One envelope

Errors

The fixed, stable set of public error types.

Lifecycle

Check-ins

How the check-in endpoints compose end-to-end.

Profiles

People

Create, update, and read the people referenced by check-ins.

Push

Webhooks

Register an HTTPS endpoint in the dashboard and verify signed deliveries.

For the full endpoint reference, see API Reference.