REST API
Reloqui exposes a versioned REST API under /api/v1. A live, interactive OpenAPI explorer is available at reloqui.com/api/v1/docs.
Authentication
Section titled “Authentication”Two ways to authenticate:
- User JWT —
Authorization: Bearer <accessToken>fromPOST /api/v1/auth/login, plus anX-Org-Idheader for org-scoped calls. Access tokens refresh via rotating refresh tokens. - Service token —
Authorization: Bearer rat_…for automation, scoped (see Roles).
Conventions
Section titled “Conventions”- Base path — every route is under
/api/v1. - Pagination — list endpoints return
{ "data": [...], "pagination": { "nextCursor", "hasMore", "pageSize" } }; growth collections use cursor paging. - Status codes —
201+Locationon creation,202for async-shaped ops,204for deletes. - Errors —
{ "error": { "code", "message", "details", "traceId" } }withSCREAMING_SNAKEcodes;X-Request-IDechoes the trace id. - Rate limits — per-IP fixed window: strict on credential endpoints (login/register/refresh), general elsewhere. The public demo entry (
/auth/demo) uses the general limit so shared/NAT IPs aren’t locked out. - Idempotency — webhook and replay paths dedup on stable keys.
Common endpoints
Section titled “Common endpoints”POST /api/v1/auth/loginGET /api/v1/releases?projectId=…POST /api/v1/releasesPOST /api/v1/releases/{id}/reconcileGET /api/v1/releases/{id}/360GET /api/v1/releases/{id}/notes?audience=engineeringPOST /api/v1/releases/{id}/publishGET /api/v1/services/{id}/lineagePOST /api/v1/actions/{actionId}/runGET /api/v1/audit/eventsPublic demo access
Section titled “Public demo access”POST /api/v1/auth/demo issues read-only tokens for the shared Nimbus Commerce demo org — the same tokens the live demo uses.