API reference

API introduction

Base URLs, authentication, conventions.

Base URLs

Host	Capabilities
`https://auth.api.devsewa.com`	Auth exchange, Secrets, Applications (console)
`https://mail.api.devsewa.com`	Mail (console-mediated today)
`https://vault.api.devsewa.com`	Vault (console-mediated today)
`https://sms.api.devsewa.com`	SMS (console-mediated; preview)
`https://hosting.api.devsewa.com`	Hosting (console-mediated; preview). Also serves the console WebSocket bridge.
`https://backups.api.devsewa.com`	Backups (console-mediated; preview)
`https://logs.api.devsewa.com`	Logs: ingest and query with the client secret (preview)

Authentication

Client-secret routes take Authorization: Bearer <client secret>. The key identifies the application and its tenant; nothing else needs to be sent. Console routes are called by the DevSewa console on your behalf with your signed-in session and are listed for transparency.

Authorization: Bearer dsk_live_9f2c1a_…
Content-Type: application/json
Accept: application/json

Conventions

JSON in and out. Errors carry a detail string.
Versioned by path (/v1). Breaking changes get a new version.
Rate limits are fair-use during early access; a 429 with Retry-After will be introduced with published quotas.

NextAuth