API conventions

Base URL and versioning

All endpoints live under a versioned path:

https://kovca.io/api/v1/{product}/{operation}

A version's response shape doesn't change. New optional fields may be added to responses; removals and type changes will ship as a new version.

Requests

• Use POST with Content-Type: application/json. Other content types return 415.
• Request bodies are limited to 16 KB (16,384 bytes). Larger bodies return 413.
• Unknown fields are rejected with 400, so typos don't pass silently.
• String fields are trimmed of leading and trailing whitespace before validation.

Responses

Successful responses return 200 with a JSON object. Every response, successful or not, has a request_id field and an X-Request-Id header with the same value. Include it when you contact support.

Usage tracking

For each authenticated request, Kovca records the request ID, API, status code, latency, timestamp, and the key used. Request and response bodies are not stored. You can see this data on the dashboard's Usage page.

Available endpoints