Authentication
Authenticate each request with an organization API key sent as a bearer token.
Authentication
Overview
Access to the AvaroAI Developer platform is via API keys.
An user with the ‘Director’ role can create or delete API keys by visiting Organization > API.
An organization can have up to 5 API keys.
Requests
Send the key as a bearer token in the Authorization header, and request JSON with the Accept header.
The key identifies your organization, so responses contain only your organization’s data.
The API does not allow cross-origin browser requests.
https://app.avaroai.com/api/v1
curl "https://app.avaroai.com/api/v1/operations/listings" \
--header "Authorization: Bearer YOUR_API_KEY" \
--header "Accept: application/json"
Rate limiting
AvaroAI’s developer API uses rate limiting in order to maintain a stable platform for everyone.
Organizations are limited to 20 requests per minute.
The limit is shared by all of the organization’s API keys, so creating more keys does not raise it.
Each response includes X-RateLimit-Limit and X-RateLimit-Remaining headers.
If the limit is exceeded, the API returns a 429 HTTP status code along with a Retry-After header.
X-RateLimit-Limit: 20
X-RateLimit-Remaining: 19
