self-IAM

API Playground

Daily quota

100 ops / key

Verification

bcrypt · SHA-256

Tenancy

org-scoped

Set your API key once above, then pick a route from the tabs below and test it. Every request carries the org_live_… key as a Bearer token and consumes one operation from the 100-op daily quota. Issuing a key requires signing in.

API key

POST /api/v1/keys · sign in required · shown once, only its SHA-256 hash is stored

Key lifecycle

  • Issue a key for your organization. It is valid for every route in its allowedRoutes.
  • Each key is limited to 100 operations per UTC day.
  • Raw keys are never persisted — only their SHA-256 digests, so a database dump cannot leak usable credentials.

Username hash

Verify a username with password or QuickHash replay.

GET /api/v1/unamehash

Response

// Response JSON will render here.
success 200username_error 404password_error 401route_forbidden 403rate_limit_exceeded 429