API Overview

Base routes

• Public ingest: /api/ingest, /api/economy/ingest
• Project APIs: /api/v1/errors, /api/v1/stats
• Public share links: /api/share/[token]
• Internal notifications: /api/notifications/*
• Internal economy sync: /api/economy/sync, /api/economy/key

Authentication

API key auth

Used by ingest and v1 data APIs:

• Header: x-api-key: rs_...

Internal dispatch auth

Used by background dispatch:

• Header: x-internal-key: <NOTIFICATION_SECRET>

Session auth

Used by team and test-notification APIs:

• Supabase auth session cookie (logged-in user)

Endpoint summary

• POST /api/ingest - ingest single or batch events
• GET /api/ingest - health check
• POST /api/economy/ingest - push player balances from the game
• GET /api/v1/errors - list grouped or raw events
• GET /api/v1/stats - aggregate stats by timeframe
• GET /api/share/[token] - public share-link data (no auth, token is the credential)
• POST /api/share/[token] - update group status via an editor share link
• POST /api/notifications/test - send test notification for a channel
• POST /api/notifications/dispatch - internal dispatch for matched fingerprints