3000).
Base URL
localhost:3000 with your server’s hostname. All routes are prefixed with /api.
Authentication
profClaw supports three authentication modes configured viasystem.authMode in settings:
- Access Key (local mode)
- API Token
Rate Limits
| Endpoint | Limit |
|---|---|
POST /api/auth/login | 10 requests / 60 seconds |
POST /api/auth/signup | 5 requests / 60 seconds |
POST /api/auth/verify-access-key | 10 requests / 60 seconds |
| All other endpoints | No hard limit (configurable) |
429 with:
Error Format
All errors follow a consistent shape:| Code | Meaning |
|---|---|
400 | Validation failed or bad request body |
401 | Not authenticated or invalid session |
403 | Authenticated but insufficient permissions |
404 | Resource not found |
429 | Rate limit exceeded |
500 | Internal server error |
501 | Feature not available in current mode/storage |
503 | Service unavailable (queue or adapter down) |
Pagination
List endpoints support both offset-based and cursor-based pagination:nextCursor when more results are available. Cursor values are opaque base64url-encoded strings encoding { createdAt, id }.
Content Types
All request and response bodies useapplication/json. Streaming endpoints use text/event-stream (SSE).
Versioning
The API is currently unversioned. Breaking changes will be announced in the changelog and migration guides provided.Related
- Authentication API - Sign up, log in, and manage sessions
- Chat API - Send messages and trigger agentic execution
- Tasks API - Create and track agentic task lifecycle
- profclaw serve - Start the HTTP server that exposes this API