The Platform API

Authentication

Manage your videos, ask questions, and build applications with the Platform API. Explore the operations below for request details, responses, and examples.

Authentication

Use a project API key or a personal access token. The signed-in app uses its session cookie.

1. X-Api-Key Header
X-Api-Key: svk_...

API keys are project-bound. All requests are automatically scoped to the key's project.

2. Bearer Token
Authorization: Bearer <user-token-or-api-key>

Accepts personal access tokens (svt_), project keys (svk_), and session JWTs. User tokens can access the projects their owner is permitted to use.

3. Query Parameter (SSE only)
?access_token=<jwt>

For EventSource/SSE connections that can't set custom headers. Use a user token or session JWT; project keys must be sent in a header.

Roles & Permissions

Read operations: any project member. Write operations (POST, PUT, DELETE): requires owner, editor, admin, or api role.

# Using API Key header
curl -H "X-Api-Key: svk_abc123" \
  https://platform.endlessai.com/api/v1/projects

# Using Bearer token
curl -H "Authorization: Bearer eyJhbG..." \
  https://platform.endlessai.com/api/v1/projects