API reference
The reference has one page for each API area. Every operation on a page has its own anchor, which is the operationId of the operation in the OpenAPI specification, so a link such as /docs/api/reference/<area>/#<operationId> always points at one operation.
Identity verification API
Verify identities, run hosted verification sessions, batch and re-verify, store evidence, and receive signed KYC, KYB and KYM webhooks.
- Open Identity verification API 25 operations
Risk scoring and agent trust API
Score a request, look up IP and device reputation, verify AI agents, and mint signed crawler vouchers from your server.
- Open Risk scoring and agent trust API 7 operations
Protected actions API
Redeem the request id a browser obtains for a protected action (login, signup, checkout) before your server lets the action proceed.
- Open Protected actions API 1 operation
Device intelligence API
Read devices, events and visits, export data, fetch the sealed-results key, write labels, and manage behavioral baselines.
- Open Device intelligence API 18 operations
Mobile and device identity API
Verify mobile attestation and integrity, deliver app configuration, and manage passkeys, handoff, delegation, recovery, wallet state and offline capture.
- Open Mobile and device identity API 22 operations
Telemetry ingestion API
Send OpenTelemetry traces, metrics, logs, profiles and deployment markers with an ingestion key.
- Open Telemetry ingestion API 5 operations
Observability query API
Query projects, traces, services and releases, manage environment policy, run exports and privacy-request lookups, and read recent signals from a coding agent.
- Open Observability query API 17 operations
MCP server
Connect an AI assistant or your own code to your workspace through the Model Context Protocol with a scoped token.
- Open MCP server 1 operation
Pulse tenant API
Read player status and decisions, create link codes, and manage links from your own back end with a tenant API key.
- Open Pulse tenant API 7 operations
Health and public key endpoints
The unauthenticated collector health probe and the public signing-key documents for verifying signed envelopes and Agent Passports offline.
- Open Health and public key endpoints 3 operations
API areas
| API | What it covers | Operations | Credential |
|---|---|---|---|
| Identity verification API | Verify identities, run hosted verification sessions, batch and re-verify, store evidence, and receive signed KYC, KYB and KYM webhooks. | 25 | ApiKeyAuth, SessionTokenAuth |
| Risk scoring and agent trust API | Score a request, look up IP and device reputation, verify AI agents, and mint signed crawler vouchers from your server. | 7 | ApiKeyAuth |
| Protected actions API | Redeem the request id a browser obtains for a protected action (login, signup, checkout) before your server lets the action proceed. | 1 | ApiKeyAuth |
| Device intelligence API | Read devices, events and visits, export data, fetch the sealed-results key, write labels, and manage behavioral baselines. | 18 | ApiKeyAuth |
| Mobile and device identity API | Verify mobile attestation and integrity, deliver app configuration, and manage passkeys, handoff, delegation, recovery, wallet state and offline capture. | 22 | ApiKeyAuth |
| Telemetry ingestion API | Send OpenTelemetry traces, metrics, logs, profiles and deployment markers with an ingestion key. | 5 | ApmIngestKeyAuth |
| Observability query API | Query projects, traces, services and releases, manage environment policy, run exports and privacy-request lookups, and read recent signals from a coding agent. | 17 | ApiKeyAuth, CodingAgentKeyAuth |
| MCP server | Connect an AI assistant or your own code to your workspace through the Model Context Protocol with a scoped token. | 1 | McpTokenAuth |
| Pulse tenant API | Read player status and decisions, create link codes, and manage links from your own back end with a tenant API key. | 7 | tenantKey |
| Health and public key endpoints | The unauthenticated collector health probe and the public signing-key documents for verifying signed envelopes and Agent Passports offline. | 3 | None |
Shared conventions
The credentials, errors, rate limits and webhooks that apply to every area are described once: start with the API overview, then read Authentication, Errors, Rate limits and Webhooks.
This page is generated from the Noxtica OpenAPI specification release v0.4.0: kyc.yaml version 1.2.0-2026-10-27 (SHA-256 c91a695cfde0), mcp.yaml version 0.1.0-2026-10-27 (SHA-256 1a4875efa736), pulse.yaml version 0.9.0-2026-10-27 (SHA-256 95196a58bb5b), v1.yaml version 1.3.0-2026-10-27 (SHA-256 3fd15257a022). Do not edit it by hand.