Skip to main content
POST

Authorizations

x-api-key
string
header
required

Headers

x-signature
string
required

Required for API-key authenticated requests. HMAC-SHA256(secretKey, timestamp + METHOD + path + body) as lowercase hex. Omit only for JWT/OAuth session tokens or public routes.

x-timestamp
string
required

Required with x-signature. Epoch milliseconds; rejected if drift exceeds 5 minutes. Omit only for JWT/OAuth session tokens or public routes.

Body

application/json
message
string
required

User message

Maximum string length: 5000
conversationId
string

Existing conversation id

agentId
string

Target internal agent id

Response

AI reply payload.

success
boolean
required
Example:

true

data
object
required

Endpoint-specific payload