Base URL
Every endpoint is prefixed with/api:
your-domain.com with the hostname where you deployed AI Review.
Response format
All responses follow a shared envelope from the@ai-review/contracts package:
object
The response payload. Shape varies per endpoint.
object
Optional metadata. Paginated list endpoints always include
meta.pagination.object | null
Present when the request fails. Contains
title, status, and optionally detail.Authentication
The API supports two authentication methods:- Session cookie — used automatically by the web dashboard after login.
- API key — pass an API key generated from the dashboard in the
Authorizationheader:
Rate limiting
Rate-limiting middleware is registered globally. The default limits are configured at the server level. If you exceed the limit you will receive a429 Too Many Requests response.
Error responses
The API uses standard HTTP status codes:
Error bodies follow the same envelope structure with a non-null
error field: