Public API (v1)
Trigger PilotX runs from CI, scripts, or any external caller with an API key.
Authentication
Every request needs an Authorization: Bearer px_live_... header — an organization-scoped API key, not a session cookie and not a Personal Access Token (pat_...). Generate one from Settings → API keys (organization admins only). The raw key is shown exactly once at creation time — store it somewhere safe.
Rate limits
Each API key is limited to a fixed number of requests per 60-second window, determined by your organization's plan tier. Every successful response carries X-RateLimit-Limit and X-RateLimit-Remaining headers so you can track your own budget without guessing. Requests over the limit are never silently dropped — they get a 429 response with a Retry-After header (seconds until the window resets) and a JSON error body. See the endpoint reference below for the exact per-tier numbers, and Settings → Billing for your organization's own live limit.
Endpoint reference
Generated from PilotX's own OpenAPI spec (GET /api/openapi), so it can't drift out of sync with what the API actually does.
Loading API reference…