Developer (API)

In addition to the app, the ANABOX smart also offers an API with which developers can integrate individual applications or existing systems.

Getting Started

To use the API, you must:

• Use a valid API key to send requests to the API endpoints.
  You can obtain your API key in the paperlesspaper application.
• Only HTTPS connections are allowed. Requests over HTTP are redirected to HTTPS via HTTP 301 redirect.
• The API returns responses in JSON format. Errors appear in the JSON body under the key error.

How do I create tokens?

You can generate API keys in your user settings.

Where can I find the API documentation?

You can find the documentation here.

Authentication

The API uses two authentication methods:
Custom API tokens and Auth0 JWT tokens.

API Token Authentication

You can generate a custom API token in the paperlesspaper app or through your administrator.
To authenticate, add the API token to the Authorization header as a Bearer token:

Authorization: Bearer <Your-Token>

• The API token must be a 64-character hexadecimal value.
• If the token is valid, the request will be authenticated on behalf of the associated user.

Authentication Error Messages

• 401 Unauthorized: Token is missing, invalid, or expired.
• 403 Forbidden: Authenticated but not authorized for the endpoint.

Rate and Usage Limits

Access restrictions apply per API key and time unit.
The limit is 300 requests per minute.
Additionally, further usage limits may apply depending on the plan.
If exceeded, you will receive the HTTP status 429 Too Many Requests.

HTTP 503 Response

An HTTP 503 error indicates an unexpected peak load in API access.
The server is usually available again within five minutes.
If the issue persists or for other HTTP 5XX errors, please contact support.