API

Status

The public API is not yet exposed on this deployment. Provider credentials must be configured first, because API jobs are executed by the same provider layer the browser tools fall back to.

Planned surface

Authentication with per-project API keys sent as a bearer token, one endpoint per tool mirroring the slugs used on this site, multipart upload for inputs and signed, expiring URLs for outputs.

• POST /v1/jobs/{tool} — create a job
• GET /v1/jobs/{id} — poll job status
• GET /v1/jobs/{id}/output — signed download
• POST /v1/webhooks — register completion callbacks

Limits and security

Requests are rate limited per key, inputs are validated for MIME type and size before execution, and outputs are served from short-lived signed URLs rather than public paths.