Authentication

Each API key belongs to one workspace and can only act inside that workspace.

Base URL

https://api.jaww.ws/api/v1

Bearer authentication

Authorization: Bearer YOUR_BYTES_API_KEY

Keys begin with:

jb_live_

Treat the entire value as secret.

Store keys safely

BYTES_API_KEY=YOUR_BYTES_API_KEY
BYTES_API_BASE_URL=https://api.jaww.ws/api/v1

Use environment variables or a secrets manager. Bytes shows a new key once.

Server-side only

Do not expose API keys in frontend JavaScript, public React or Vite environment variables, mobile bundles, static HTML, repositories, screenshots, logs or support messages.

A static website can use Bytes safely by calling the API from its private build, publishing or deployment process, then publishing only the resulting short URL.

Rate limits

Authenticated Developer API requests are limited to 120 requests per minute for each API key. Different API keys use separate rate-limit buckets.

Requests that reach the Developer API without a usable Bearer key use a stricter fallback limit of 10 requests per minute per IP address before authentication is resolved.

When a limit is exceeded, Bytes returns:

429 Too Many Requests

Clients should respect the Retry-After response header when present and retry with bounded backoff rather than immediately repeating the request.

Authentication errors

401 Unauthorized

{
  "message": "Unauthenticated."
}