Public API

Authentication

Pro owners and admins create scoped keys in Settings → API & webhooks. The full key is shown once and stored as a SHA-256 hash.

curl https://evnao.com/api/v1/tickets \
+  -H "Authorization: Bearer evnao_live_YOUR_KEY"

Scoped and revocable

Grant only the needed ticket, knowledge, analytics, or webhook scope. Keys can expire and be revoked independently without changing a user password.

Tenant and plan checks

Every request resolves the key to one active workspace and rejects suspended, unonboarded, expired, revoked, or non-Pro access.

Limits and writes

Keys are limited to 600 requests per minute. Every write requires an Idempotency-Key; a replay returns the first completed response and a conflicting body is rejected.