# API Reference

The Autheona API suite allows you to programmatically collect and validate data directly within your applications. By integrating our APIs, you can ensure data consistency, automate verification workflows, and maintain high-quality records across your platform.

At this time, the following APIs are available for public use:

- [User Trust API](/docs/api-reference/user-trust)

> [!NOTE]
> Documentation for additional endpoints is currently in development. Please check back frequently for updates to our API library.

## Base URL

```http
https://api.autheona.com/v1/
```

All API requests must use HTTPS.

## Authentication

Authenticate using Bearer tokens in the Authorization header:

```http
x-api-key: <access-token>
```

## Rate Limits

Rate limits are enforced per access token:

- **Limit**: `10` requests
- **Window**: `1` second

Monthly API call quotas are enforced at the account level based on your subscription plan. API calls count toward your monthly quota for production projects. Sandbox project calls do not count toward quota.

If you exceed the rate limit, the API will return an error. Implement exponential backoff in your integration to handle rate limit errors gracefully.

## Request Format

All requests must use:

- **Method**: `POST`
- **Content-Type**: `application/json`
- **Body**: `JSON` with required parameters

## Response Format

All responses are returned as JSON with:

- **Success**: HTTP `200` with validation results
- **Bad Request**: HTTP `400` for invalid parameters
- **Invalid Authorization**: HTTP `401` for invalid parameters
- **Server Error**: HTTP `500` for internal errors

## Rate Limits

Rate limits are enforced at the account level based on your subscription plan. API calls count toward your monthly quota unless made from sandbox projects.