API Overview
The Timepoint ecosystem exposes three HTTP APIs. The Clockchain public endpoints require no authentication. Flash and Pro require service keys.Base URLs
| Service | Base URL | Auth Required |
|---|---|---|
| Flash | https://api.timepointai.com | Yes (X-Service-Key) |
| Clockchain (public) | https://timepoint-clockchain-deploy-private-production.up.railway.app | No |
| Clockchain (write) | Same as above | Yes (X-Service-Key) |
| Pro Cloud | https://timepoint-pro-cloud-private-production.up.railway.app | Yes (PRO_API_KEY) |
Quick Examples
Clockchain — No Auth Needed
Flash — Render a Moment
Response Format
All APIs return JSON. Clockchain public endpoints return paginated results:Rate Limits
| Tier | Limit | Applies To |
|---|---|---|
| Public | 60/min | Clockchain unauthenticated reads |
| Auth reads | 300/min | Authenticated GET requests |
| Auth writes | 30/min | POST/PUT/DELETE with service key |
X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset
CORS
Clockchain public endpoints allow all origins (CORS_ORIGINS=*). Rate limit headers are exposed for browser clients.