Base URL
/v1/platform. Team members, roles and the knowledge base live under /v1/auth. Both take the same API key.
Version
This reference documents Heliyos API v1.0.0. The major version is in every path (/v1/). New endpoints and new optional fields arrive without a new major version, and the Changelog lists each change. The MCP server @heliyos/mcp v1.0.0 calls this version.
Authentication
Send your workspace API key as a bearer token on every request. See Authentication.Requests
- Bodies are JSON. Send
Content-Type: application/json. - Ids are 24-character hexadecimal strings, such as
66f1a8c3e4b0a1b2c3d4e5f6. - Dates are ISO 8601 in UTC, such as
2026-11-04T09:30:00.000Z. - Unknown body and query keys are dropped before the request is handled.
PATCHchanges only the fields you send. Each endpoint says when a field replaces a whole list.
Responses
Every success answers with the same envelope.data holds the resource or list. meta.message is a short human-readable summary. Lists add meta.pagination.
204 No Content with no body. Their pages say so.
Errors use a separate envelope with a stable error.code. See Errors.
Paging, filtering and limits
Pagination
Cursor paging by default, page numbers when you sort or group.
Filtering and sorting
The
filters JSON object most lists accept.Rate limits
60 requests a minute per key, with headers to pace yourself.
Groups
Every endpoint in this reference is also used by the Heliyos MCP server; each page names the tools that call it.
OpenAPI
The full OpenAPI 3.0 document behind this reference is at/api-reference/openapi.json. Use it to generate a client or import the API into Postman or Insomnia.
