API Introduction & Authentication

The Mosco API lets you build on top of your AI team. Read and write conversations, manage leads, fire webhooks on deal events, and install agent templates programmatically. It's a REST API over HTTPS with JSON request and response bodies.

All API requests go to:

https://api.mosco.ai/v1

All endpoints require HTTPS. HTTP requests are rejected.

All requests authenticate with a bearer token. Create a key at Settings > Developers.

Authorization: Bearer mk_live_xxxxxxxxxxxxxxxxxxxxxx

Keys are scoped as 'read' or 'read+write'. Treat them like passwords. Never commit them to version control or put them in client-side code.

- 600 requests per minute per API key

- Rate-limited requests return HTTP 429

- Implement exponential backoff on 429 responses

- The X-RateLimit-Remaining header shows your remaining quota