Skip to main content

API Overview

All consumer traffic goes through the API Gateway at api.timepointai.com, which authenticates requests, manages credits, enforces rate limits, and proxies to backend services. Each service also has a direct subdomain for service-to-service calls.

Architecture

Domain Map

Consumer apps (iPhone, web app, external clients) should use api.timepointai.com — the gateway authenticates and routes transparently. Service-to-service calls should use direct subdomains (e.g. clockchain.timepointai.com) with appropriate service keys to skip the gateway hop.

Quick Examples

Clockchain — No Auth Needed

Flash — Render a Moment (via Gateway)

Response Format

All APIs return JSON. Clockchain public endpoints return paginated results:

Rate Limits

Rate limit headers: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset

CORS

All services allow cross-origin requests from *.timepointai.com subdomains.