API Documentation
Complete API reference for the h.work platform.
Base URLs
| Environment | URL |
|---|---|
| Production | https://api.h.work |
| Staging | https://api.h852.work |
Authentication
All protected endpoints require:
Authorization: Bearer <jwt>
Rate limits: 100 req/min per IP (auth endpoints: 10 req/min).
Endpoint Categories
| Category | Description | Prefix |
|---|---|---|
| Auth | Login, registration, 2FA, invites | /auth/* |
| Conversations | Messages, threads, search | /conversations/* |
| Expert Queue | Review queue, responses, corrections | /expert-queue/* |
| Organizations | Client/org management | /ops/*, /orgs/* |
| Channels | Slack, Email, WhatsApp, Telegram | /channels/* |
| Knowledge Base | KB documents, retrieval (#817/#819/#823) | /kb/* |
| Notifications | AppNotification REST + Socket.io (#915) | /notifications/* |
| Billing | Lago subscriptions, invoicing (post-#1016/#1069) | /client/billing/*, /ops/billing/*, /billing/webhooks/lago |
| Agentic Tasks | Multi-step task approval (RIG-backed post-#696) | /agentic/* |
| Tavus Admin | Tavus replicas + function-call definitions (API module: api/src/tavus/; route prefix renamed to /ops/tavus/* via #1031, with legacy /ops/personas/* returning 308 redirects for ~30 days) | /tavus/*, /ops/tavus/function-calls (legacy /ops/personas/function-calls → 308 redirect) |
| Admin | Superadmin operations | /admin/* |
| Analytics | Metrics and reporting | /analytics/* |
Legacy Route Deprecation
| Legacy | Current | Status |
|---|---|---|
/am/* (frontend) | /ops/* | Frontend redirect in place; API still serves /am/orgs/* etc. — see banner at top of reference.md |
/superadmin/* (frontend) | /ops/* | Frontend redirect in place; API still serves /superadmin/* and /admin/* |
/portal/* | /client/* | Removed 2026-05 |
See full reference for complete endpoint listing.
Last updated: 2026-06-01 (Pass-2 docs audit sweep — KB/Notifications/Lago categories added; legacy route note qualified frontend-vs-API).