Skip to Content
DocumentationAPI ReferenceOverview

API Reference

The AttributeHQ REST API provides programmatic access to all platform features.

Base URL

https://api.attributehq.com/v1

Authentication

The API uses two authentication methods:

MethodHeaderUsed By
JWT TokenAuthorization: Bearer <token>Dashboard, management endpoints
API KeyX-API-Key: <key>SDK endpoints (clicks, installs, events)

JWT Token

Obtained via POST /api/v1/auth/signup or POST /api/v1/auth/login. Include in the Authorization header:

Authorization: Bearer eyJhbGciOiJIUzI1NiIs...

API Key

Generated via POST /api/v1/apps/:id/keys. Include in the X-API-Key header:

X-API-Key: ak_your_api_key

For sendBeacon fallback (where headers can’t be set), the API key can also be sent in the request body as _api_key.

Response Format

All endpoints return JSON with this structure:

Success

{ "success": true, "data": { ... } }

Error

{ "success": false, "error": { "code": "VALIDATION_ERROR", "message": "Human-readable error message", "details": { ... } } }

Error Codes

StatusCodeDescription
400VALIDATION_ERRORInvalid request body or query params
401UNAUTHORIZEDMissing or invalid authentication
403FORBIDDENPermission denied (e.g., wrong org)
404NOT_FOUNDResource not found
409CONFLICTResource already exists
429RATE_LIMITEDToo many requests
500INTERNAL_ERRORServer error

Rate Limiting

EndpointLimit
SDK endpoints (/clicks, /installs, /events)100,000 req/sec per API key
Dashboard endpoints1,000 req/min per user

Endpoints Overview

CategoryEndpoints
Authenticationsignup, login, me
AppsCRUD for apps
API KeysGenerate and manage API keys
AttributionClick tracking, install attribution, event tracking
AnalyticsDashboard KPIs, sources, campaigns, retention, revenue
PostbacksConfigure ad network postbacks
WebhooksConfigure real-time event webhooks