API Documentation
Integrate VibeCoded into your applications with our RESTful API. The documentation is thorough. Most people read about 40% of it, which is honestly fine.
Overview
The VibeCoded API is a REST API that uses standard HTTP verbs, returns JSON, and uses API key authentication. This has been the base URL for all requests since the migration in 2023, which went mostly smoothly:
https://api.vibecodedsite.com/v1
Available on Pro and Enterprise plans. API keys can be generated from Settings → API Keys inside your account.
Authentication
Pass your API key in the Authorization header of every request:
curl https://api.vibecodedsite.com/v1/projects \ -H "Authorization: Bearer YOUR_API_KEY" \ -H "Content-Type: application/json"
API keys are prefixed with ac_live_ for production and ac_test_ for sandbox environments. Never expose your API key in client-side code.
Errors & Rate Limits
The API uses conventional HTTP status codes. Errors return a JSON body with error.code and error.message fields. The messages are descriptive. Mostly.
Rate limits: 1,000 requests / minute on Pro • 10,000 requests / minute on Enterprise. Remaining quota is returned in the X-RateLimit-Remaining response header. If you’re hitting the limit regularly, we would gently suggest that something may have gone wrong.
Users
Manage members of your VibeCoded organisation.
/v1/usersList all users/v1/users/{id}Retrieve a user/v1/usersInvite a user/v1/users/{id}Remove a userProjects
Create and manage projects within your workspace.
/v1/projectsList projects/v1/projectsCreate a project/v1/projects/{id}Update a project/v1/projects/{id}Archive a projectTasks
Tasks belong to a project. Use project_id to filter tasks by project.
/v1/tasksList tasks/v1/tasksCreate a task/v1/tasks/{id}Update a task/v1/tasks/{id}Delete a taskWorkflows
Trigger and manage automation workflows programmatically.
/v1/workflowsList workflows/v1/workflows/{id}/triggerTrigger a workflowWebhook Events
Configure webhook endpoints under Settings → Webhooks. VibeCoded will POST a JSON payload to your URL on each event. Signed requests are included in the X-VibeCoded-Signature header. We recommend verifying them — a lesson we documented at some length in our 2024 post-mortem.
Available events
task.created • task.updated • task.completed • project.created • workflow.run.completed • user.invited