Authorization: Bearer pfai_.... Generation submissions
also require Content-Type: application/json and an Idempotency-Key header.
Authentication
Create scoped keys and store one-time secrets safely.
Request lifecycle
Understand idempotency, polling, and terminal statuses.
Versioning
The current contract isv1. Backward-compatible fields may be added without
changing the version. Breaking request or response changes will use a new API
version.
Timestamps and IDs
- Timestamps are ISO 8601 strings in UTC.
- API request IDs begin with
req_. - API keys begin with
pfai_. - Webhook secrets begin with
whsec_. - Generated-library source IDs are UUIDs owned by the authenticated account.
