Skip to main content

API Reference

This section documents the public Tuturuuu HTTP API. It is reference material for integrators calling Tuturuuu endpoints from outside the platform. The maintained runtime is Next.js Web and its satellite apps. Rust (apps/backend) and TanStack Start (apps/tanstack-web) are paused and not in use. Docker setup is inactive and the Docker cron runner is retired. Retained migration designs describe a possible future, not live traffic or a current setup requirement. See the active runtime map.

What this API covers

This section documents the OpenAI-compatible AI Studio API, including responses, chat completions, embeddings, images, and versioned agents. See AI Studio API. The older Generate AI Completion endpoint remains available as a compatibility adapter. The source route inventory locates active Next.js handlers and their owners. Internal routes are not automatically public integration contracts; use the product-specific API/SDK guide for supported use.

Authentication

Authentication depends on the endpoint:
  • AI-only bearer keys. AI Studio endpoints authenticate with a hash-only ttr_ai_ workspace credential in the Authorization: Bearer header. These keys can call only AI Studio endpoints and are restricted by workspace, model, expiry, rate, and optional credit-budget policy.
  • Legacy workspace API keys. The compatibility AI generate endpoint still accepts its existing request-body accessKey contract while integrations migrate to AI Studio.
  • App sessions / session cookies. First-party Next.js routes resolve actors through their owning application boundary and check workspace permissions. Supported bearer authentication is endpoint-specific. Internal routes are not general-purpose public endpoints merely because they exist in source.
Never commit API keys or tokens. Reference credentials by environment variable name and supply them at request time.

Active contracts and retained migration specification

The inactive Rust migration retains its specification at:
It describes retained migration work, not the deployed API. Rust and TanStack Start are not in use and are not refreshed by ordinary Next.js changes. Active HTTP behavior lives in the owning Next.js app, and shared first-party contracts live in packages/internal-api. Use the AI Studio API, SDK, and active runtime map for current integration and operating guidance.