Endpoint
Authentication
All requests require an API key in theX-API-Key header:
GraphQL Basics
Queries
Queries are used to fetch data without side effects:Mutations
Mutations create, update, or delete data:Variables
Pass variables separately from the query:Common Patterns
Pagination
List queries use cursor-based pagination:Filtering
Filter results using thefilter parameter:
Sorting
Sort results using thesorting parameter:
Error Handling
Errors are returned in theerrors array:
Common Error Codes
| Code | Description |
|---|---|
UNAUTHENTICATED | Invalid or missing API key |
CUSTOMER_NOT_FOUND | Customer doesn’t exist |
SUBSCRIPTION_NOT_FOUND | Subscription doesn’t exist |
FEATURE_NOT_FOUND | Feature doesn’t exist |
VALIDATION_ERROR | Invalid input parameters |
ENTITLEMENT_LIMIT_EXCEEDED | Usage would exceed limit |
Rate Limits
The API enforces rate limits to ensure fair usage:- Standard tier: 1,000 requests per minute
- Enterprise tier: Custom limits
X-RateLimit-Limit: Request limitX-RateLimit-Remaining: Requests remainingX-RateLimit-Reset: Reset timestamp
Subscriptions (Real-time)
The API supports GraphQL subscriptions for real-time updates:entitlementsUpdated- Customer entitlement changesusageUpdated- Usage updatescreditBalanceUpdated- Credit balance changespackagePublished- Package publication events
