API

Reference

Browse the full OpenAPI reference at aviora-api.vercel.app/api/v1/docs.

Authentication

Every authenticated request carries a bearer token obtained from POST /auth/login. Tokens expire after seven days; there is no refresh token, so re-authenticate when one lapses.

Conventions

• All identifiers are UUID strings.
• Timestamps are ISO 8601; date-only fields use YYYY-MM-DD.
• Collection endpoints return bare arrays, not envelopes.
• Errors share one shape: { statusCode, error, message, path, timestamp }, where message is a string or an array of strings.

Public access

There is no public API programme yet. If you would find one useful, tell us what you would build at support@avioraai.xyz.