> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pcnaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Reference

> Endpoints and authentication for the AutoCertify API.

# API Reference

The AutoCertify API is built with Express and TypeScript. It uses JSON for request and response bodies.

## Authentication

Production API calls require a valid Auth0 OIDC token. Include your token in the `Authorization` header:

```http theme={null}
Authorization: Bearer <your-oidc-token>
```

The API validates the token against the configured issuer (`AUTH_ISSUER`) and audience (`AUTH_CLIENT_ID`).

For automated E2E testing and QA, a scoped credential endpoint is available. This uses the `E2E_LOGIN_SECRET` and is not an authentication bypass.

```http theme={null}
POST /v1/auth/e2e-login
```

## Rate Limiting

Rate limiting is enforced globally using a durable Postgres-backed store. This ensures limits are properly enforced across all running API instances.

## Core Services

*Note: Specific endpoint paths (e.g., `GET /v1/domains`) and payloads are not yet documented in this reference. The following functional areas are supported by the API:*

* **Domains**: Bulk creation and querying of domains.
* **API Keys**: Manage programmatic access keys.
* **Webhooks**: Configure endpoints to receive lifecycle events.
* **Audit**: Query audit events across your organization.
* **Team Management**: Manage user roles and access within your organization.
* **Support**: Backend APIs for the portal support chat.
* **Public Signup**: A passwordless endpoint that creates a workspace, adds the first domain, and returns the necessary DNS delegation record.
* **Developer Invites**: Verification routes (`/verify/:token`) for web developers to add DNS records without requiring full portal authentication.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.