Nokku API

The Nokku API provides access to core platform functionality via Connect RPC over HTTP.

Authentication

Authentication is supported via two methods:

• Cookie-based (recommended for web applications): Session cookie automatically sent by browsers
• Bearer token (for API clients): Include token in the Authorization header

Tokens use PASETO (Platform-Agnostic Security Tokens) for enhanced security.

Rate Limiting

API requests are rate-limited per authenticated user. Check response headers for current limits:

• X-RateLimit-Limit: Maximum requests per window
• X-RateLimit-Remaining: Remaining requests in current window
• X-RateLimit-Reset: Unix timestamp when the limit resets

Error Handling

Errors follow the standard Connect RPC error format.