Bearer Token
All API endpoints (except public ones) require an Authorization header with your session token:
Your session_token is obtained after logging in via Discord OAuth2 on the PhanomCloud Dashboard.
Never share your session_token. It grants full access to your account and all your bots.
Automation Token
For CI/CD pipelines and automated scripts, use the automation_token with the X-Automation-Token header instead. You can retrieve and rotate it from your account settings.
Rate Limiting
All routes are rate limited. Authentication endpoints have stricter limits to prevent abuse. If you hit a rate limit, the API returns HTTP 429 Too Many Requests.
Public Routes
The following routes do not require any authentication:
