Core capabilities
The Cloud API provides: Authentication & Authorization:- User registration and login
- JWT token generation and refresh
- Role-based access control
- Project-scoped permissions
- Project and user data storage
- API key generation and management
- User membership tracking
- Secure credential storage
- Image generation via Replicate AI
- File upload and storage
- Generation history tracking
- Content processing
Request/Response pattern
All API interactions follow a consistent pattern:- Client sends request with authentication headers
- API validates credentials and permissions
- API processes the request (creates, reads, updates, deletes data)
- API returns structured JSON response
- Client handles success or error state
Data consistency
The Cloud API ensures: Atomicity: Operations complete fully or not at all Consistency: Data remains valid across all operations Isolation: Concurrent requests don’t interfere with each other Durability: Committed data persists permanentlySecurity model
Multiple layers protect your data: Transport security:- HTTPS encryption for all requests
- TLS 1.3 for secure connections
- JWT tokens with short expiry (30 minutes)
- Refresh tokens for extended sessions (7 days)
- Secure token storage in httpOnly cookies
- Project-scoped access control
- API key validation
- Role-based permissions
- Password hashing with bcrypt
- API key hashing with SHA-256
- Encrypted storage at rest
Scalability
The Cloud API is designed to scale: Horizontal scaling: Add more servers to handle increased load Caching: Frequently accessed data cached for fast retrieval Rate limiting: Prevents abuse and ensures fair resource allocation Async processing: Long-running tasks (AI generation) processed in backgroundReliability
High availability: Multiple redundant servers ensure uptime Automatic backups: Data backed up regularly Monitoring: Real-time health checks and alerting Error recovery: Automatic retry logic for transient failuresAPI versioning
The API uses version prefixes: Current version:/api/v1/*
Stability: v1 endpoints are stable and backward-compatible
Deprecation: Deprecated endpoints receive 6-month notice before removal
See the Cloud API Reference for complete endpoint documentation.

