Base URL
/v1/. The /health endpoint is unversioned.
Authentication
All endpoints except/health and GET /v1/verify/:token require a Bearer token:
Rate limits
Every response includes rate limit headers:
Exceeded limits return
429 with the standard error schema.