Create a key to copy examples filled with your team.
Introduction
Bearer tokens, team isolation, and OpenAPI.
The REST API is under /api/v1. Authenticate with a platform application token as Authorization: Bearer. The token is locked to that application's team. A team_id that does not match the token is rejected with 403.
The OpenAPI spec is at /api/v1/openapi.yaml.
whoami.sh
1
curl -sS -X GET \
2
-H 'Authorization: Bearer YOUR_API_KEY' \
3
https://postshiba.com/api/v1/users/me
Lists
PostShiba resources skip the pagination helper. Lists are capped. Events and inbound messages return at most 200 rows after filters.
Rate limits
There is no customer REST rate limit. SMTP AUTH is limited to 20 failed attempts per 10 minutes, keyed by IP and username. A hit returns 429 {ok: false, error: rate_limited}.