Skip to main content

Base URL

Endpoints

Conventions

  • Auth: Authorization: Bearer <credential>. See Authentication.
  • Errors: {"error": {"code", "message", "retryable"}}. See Errors.
  • Caching: key management responses send Cache-Control: no-store, including errors.
  • Browsers: cross-origin requests are allowed only from configured origins. Browsers can read the X-Tazo-Request-Id response header.
  • Rate limits: not enforced yet.

OpenAPI

The specification is available as openapi.yaml for client generation and tooling.