---
title: "API reference"
description: "Every public Noxtica server API area with its base URL, credential and operations, generated from the published OpenAPI specifications."
canonical_url: "https://noxtica.com/docs/api/reference/"
markdown_url: "https://noxtica.com/docs/api/reference/index.md"
last_updated: 2026-10-27
published: 2026-10-27
section: "server-apis"
section_title: "Server APIs"
openapi_release: "v0.4.0"
openapi_spec_version: "0.4.0"
site: "Noxtica"
language: "en"
source: markdown
---

# API reference

The reference has one page for each API area. Every operation on a page has its own anchor, which is the `operationId` of the operation in the OpenAPI specification, so a link such as `/docs/api/reference/<area>/#<operationId>` always points at one operation.

## API areas

| API | What it covers | Operations | Credential |
| --- | --- | --- | --- |
| [Identity verification API](https://noxtica.com/docs/api/reference/kyc/) | Verify identities, run hosted verification sessions, batch and re-verify, store evidence, and receive signed KYC, KYB and KYM webhooks. | 25 | `ApiKeyAuth`, `SessionTokenAuth` |
| [Risk scoring and agent trust API](https://noxtica.com/docs/api/reference/score/) | Score a request, look up IP and device reputation, verify AI agents, and mint signed crawler vouchers from your server. | 7 | `ApiKeyAuth` |
| [Protected actions API](https://noxtica.com/docs/api/reference/protected-actions/) | Redeem the request id a browser obtains for a protected action (login, signup, checkout) before your server lets the action proceed. | 1 | `ApiKeyAuth` |
| [Device intelligence API](https://noxtica.com/docs/api/reference/device/) | Read devices, events and visits, export data, fetch the sealed-results key, write labels, and manage behavioral baselines. | 18 | `ApiKeyAuth` |
| [Mobile and device identity API](https://noxtica.com/docs/api/reference/mobile/) | Verify mobile attestation and integrity, deliver app configuration, and manage passkeys, handoff, delegation, recovery, wallet state and offline capture. | 22 | `ApiKeyAuth` |
| [Telemetry ingestion API](https://noxtica.com/docs/api/reference/ingest/) | Send OpenTelemetry traces, metrics, logs, profiles and deployment markers with an ingestion key. | 5 | `ApmIngestKeyAuth` |
| [Observability query API](https://noxtica.com/docs/api/reference/observability/) | Query projects, traces, services and releases, manage environment policy, run exports and privacy-request lookups, and read recent signals from a coding agent. | 17 | `ApiKeyAuth`, `CodingAgentKeyAuth` |
| [MCP server](https://noxtica.com/docs/api/reference/mcp/) | Connect an AI assistant or your own code to your workspace through the Model Context Protocol with a scoped token. | 1 | `McpTokenAuth` |
| [Pulse tenant API](https://noxtica.com/docs/api/reference/pulse/) | Read player status and decisions, create link codes, and manage links from your own back end with a tenant API key. | 7 | `tenantKey` |
| [Health and public key endpoints](https://noxtica.com/docs/api/reference/status/) | The unauthenticated collector health probe and the public signing-key documents for verifying signed envelopes and Agent Passports offline. | 3 | None |

## Shared conventions

The credentials, errors, rate limits and webhooks that apply to every area are described once: start with the [API overview](https://noxtica.com/docs/api/), then read [Authentication](https://noxtica.com/docs/api/authentication/), [Errors](https://noxtica.com/docs/api/errors/), [Rate limits](https://noxtica.com/docs/api/rate-limits/) and [Webhooks](https://noxtica.com/docs/api/webhooks/).

_This page is generated from the Noxtica OpenAPI specification release `v0.4.0`: `kyc.yaml` version `1.2.0-2026-10-27` (SHA-256 `c91a695cfde0`), `mcp.yaml` version `0.1.0-2026-10-27` (SHA-256 `1a4875efa736`), `pulse.yaml` version `0.9.0-2026-10-27` (SHA-256 `95196a58bb5b`), `v1.yaml` version `1.3.0-2026-10-27` (SHA-256 `3fd15257a022`). Do not edit it by hand._