points api
create api keys at account. send Authorization: Bearer YOUR_KEY. browser requests use secure session cookies. mutations require an origin header matching the application origin; command-line clients must include it too. data belongs to the authenticated account. invalid credentials return 401; account outages return 503.
curl -H 'Authorization: Bearer YOUR_KEY' https://points.dorianmarie.com/api/identity
| method | path | purpose |
|---|---|---|
| get | /api | public application metadata |
| get | /api/identity | authenticated identity |
| get | /api/v1/openapi.json | complete points api specification: balances, currencies, permanent email transfers, reserved withdrawals, and administrator operations |
| get | /api/v1/docs | request examples and authentication requirements; use an account session or a points-scoped bearer key |
| post | /api/v1/transfers | transfer {email,currencyId,amount}; decimal string amount; same-origin and idempotency-key required |
| post | /api/v1/withdrawals | reserve {currencyId,amount,instructions} for manual payout; same-origin and idempotency-key required |