API reference

Pulse provides a REST API for event ingestion, customer management, and automation.

Base URL

https://zruqflqnlzriyowvhcdy.supabase.co

Authentication

All endpoints require one of:

• User session token — for dashboard and authenticated endpoints.
• Scoped API key (prefix pk_) — for the Track API and server-to-server access.
• Webhook signing — inbound webhooks authenticate via payload signature (HMAC).

Sending a request

curl https://zruqflqnlzriyowvhcdy.supabase.co/functions/v1/track \
  -H "Authorization: Bearer pk_..." \
  -H "Content-Type: application/json" \
  -d '{"external_id":"u1","name":"signup_completed"}'

Rate limits

All API endpoints are rate-limited per workspace. Exceeding limits returns HTTP 429. Consult your plan's documentation for specific quotas.

Error format

{ "error": "human readable message" }

Status codes follow standard HTTP conventions: 400 for bad input, 401 for missing auth, 403 for insufficient scope, 404 for unknown entity, 429 for rate limiting, 5xx for server errors.

Endpoints