Developer & Product Docs

Base URL
All MuArLab API requests are made to your assigned environment endpoint, provided after onboarding.

Authentication
Include your API key in the Authorization header:

Authorization: Bearer YOUR_API_KEY

Common Endpoints
GET    /api/v1/health          — Service health check
GET    /api/v1/resources       — List resources
POST   /api/v1/resources       — Create a resource
GET    /api/v1/resources/:id   — Retrieve a resource
PATCH  /api/v1/resources/:id   — Update a resource
DELETE /api/v1/resources/:id   — Delete a resource

Rate Limits
API rate limits are configured per account based on your plan and usage agreement.

Errors
MuArLab APIs return standard HTTP status codes with a JSON error body:

{
  "error": {
    "code": "invalid_request",
    "message": "A human-readable description of the error."
  }
}

API Keys
1. Contact sales to provision your MuArLab account.
2. Receive your API key and environment endpoint after onboarding.
3. Store your API key securely — never expose it in client-side code.

Bearer Token Authentication
curl -X GET "https://your-env.muarlab.com/api/v1/resources" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

Environment Separation
MuArLab provides separate credentials for development and production environments. Use development credentials for testing and production credentials only when live.

Key Rotation
Contact support to rotate compromised or expired API keys. We recommend rotating keys periodically as a security best practice.

Webhook Configuration
Register your webhook endpoint during onboarding or through your account settings.

Example Payload
{
  "id": "evt_01H8X2K9M3N4P5Q6R7S8T9U0V",
  "type": "order.created",
  "created_at": "2026-07-10T14:30:00Z",
  "data": {
    "order_id": "ord_12345",
    "status": "pending",
    "customer_id": "cus_67890"
  }
}

Verifying Webhooks
MuArLab signs webhook payloads. Verify the signature using your webhook secret before processing events.

Responding to Webhooks
Return a 200 status code within 10 seconds to acknowledge receipt. Failed deliveries are retried with exponential backoff.