# API overview

The implemented REST management surface.

Status: HTTPS management API deployed · Rentals and live billing disabled

## Base URL
The deployed management API is `https://api.computeruse.space/api/v1`. Local development uses `http://127.0.0.1:8080`. The public API reports zero saleable capacity while physical launch checks remain incomplete.

## Authentication
Send `Authorization: Bearer <credential>` on protected requests. Only the stock and proxy catalog reads and authentication entry points are public. Provider webhooks use their own signature verification.

## Implemented endpoint groups
| Area | Endpoints |
|---|---|
| Accounts | POST register, login, logout, recover; GET account |
| Keys | POST keys, keys/revoke |
| Rentals | GET stock; POST purchases, assignments, rentals/renewal |
| Billing | POST topups, stripe/webhook |
| Proxies | GET proxies/catalog; POST proxies/quote |
| Administration | GET admin, admin/operations; POST admin/suspend, admin/reconcile, admin/refunds |

Download [OpenAPI JSON](/openapi.json) for the request contracts. All paths in that document correspond to current handlers. Planned runtime APIs are documented separately and are not included as if implemented.

## Request and response conventions
JSON object bodies and `Content-Type: application/json` are required for normal POST requests. The normal body limit is 16 KiB. Monetary amounts are integer minor units in USD. Responses use `Cache-Control: no-store`.

## Errors and retries
See [errors and idempotency](/docs/errors/). Reuse the same idempotency key after uncertain purchase/payment responses. Inspect the existing operation before trying a new key.