API Overview
All consumer traffic goes through the API Gateway atapi.timepointai.com, which authenticates requests, manages credits, enforces rate limits, and proxies to backend services. Each service also has a direct subdomain for service-to-service calls.
Architecture
Domain Map
Consumer apps (iPhone, web app, external clients) should use
api.timepointai.com — the gateway authenticates and routes transparently.
Service-to-service calls should use direct subdomains (e.g. clockchain.timepointai.com) with appropriate service keys to skip the gateway hop.
Quick Examples
Clockchain — No Auth Needed
Flash — Render a Moment (via Gateway)
Response Format
All APIs return JSON. Clockchain public endpoints return paginated results:Rate Limits
Rate limit headers:
X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset
CORS
All services allow cross-origin requests from*.timepointai.com subdomains.