Base URL
All REST endpoints live at:cloud.algovoi.co.uk proxies a subset of public-read endpoints and chat-bot webhooks but is not the canonical API. Use api1.* for any authenticated API calls from your backend.
Content type
Every request sends and receivesapplication/json. The gateway rejects other content types with HTTP 415.
Versioning
The REST API is unversioned in the URL. Breaking changes are gated by feature flag and announced in the changelog before any rollout. Webhook payloads carry anapi_version field so receivers can detect schema changes.
Idempotency
For endpoints that create resources (POST /v1/payment-links, POST /v1/resources, etc.) you can include an Idempotency-Key header. Replays with the same key within 24 hours return the originally-created resource without creating a duplicate.
Request IDs
Every response includes anX-Request-Id header. Include it in support requests so we can find the matching server log line in seconds.
Authentication
Every authenticated endpoint requires:Errors
JSON envelope:{ "error": "code_string", "message": "human-readable", ...context }. See Errors for the full code list and HTTP-status mapping.
Rate limits
Default tenant limit is 300 requests per minute with a burst of 60. Returns429 Too Many Requests with Retry-After headers. See Rate limits.