One API key works on every brand. Predictable REST, role-scoped access, signed webhooks, and a uniform service contract across the whole ecosystem — documented per product, unified here.
$ curl https://albos.tr/v1/auth/me \ -H "Authorization: Bearer lb_live_…" # the same key, on a brand: $ curl https://comphive.albos.tr/v1/servers?org_id=… \ -H "Authorization: Bearer lb_live_…"
lb_live_ keys are org-scoped at a fixed role — never owner — and validate identically on Core and every product API.
JSON errors, conventional status codes: 401, 403 with the role named, 404 that never confirms others' resources, 409 on invalid state, 429 rate-limited.
Per-product HMAC-SHA256 events with retries and delivery logs. Live today on Comphive; the same shape rolls out per brand.
Product APIs are documented on each brand's developers page. These are the shared platform surfaces at albos.tr/v1.
| Endpoint | Access | Description |
|---|---|---|
| POST/v1/auth/request-link | public | Start passwordless sign-in (rate-limited) |
| POST/v1/auth/verify | public | Exchange one-time token for a session |
| GET/v1/auth/me | session / key | Identity + org memberships + roles — the SSO contract |
| GET/v1/auth/sessions | session | List devices; revoke with DELETE /v1/auth/sessions/{id} |
| GET/v1/organizations | session | Your organizations; POST creates (auto wallet + distributor routing) |
| GET/v1/organizations/{id}/wallet | finance role | Balance; /transactions for the ledger |
| GET/v1/organizations/{id}/tokens | member | AI-token balance (the cross-brand AI currency) |
| POST/v1/organizations/{id}/api-keys | manager | Issue an lb_live_ key (shown once); GET lists, DELETE revokes |
| POST/v1/albos | session | Ask the ALBOS agent — read answers instantly, sensitive actions stage a confirmation_id |
| POST/v1/albos/confirm | session | Execute a staged ALBOS action (create_org, credit_wallet, grant_tokens, revoke_session) |
| POST/v1/albos/reject | session | Cancel a staged ALBOS action (the Cancel button) |
| POST/v1/organizations/{id}/kyc | admin role | Submit identity verification; GET for history, staff review at /v1/admin/kyc |
| GET/v1/memory | session | Your ALBOS agent memory — soul.md (you write) + memory.md (agent-curated nightly) |
Full request/response schemas for every endpoint above: OpenAPI 3.1 spec. Building an agent or LLM-based integration? Start with llms.txt — a machine-readable index of what LayerBrick's API can do.
Every brand exposes the same contract under /v1/service-contract/ on its own domain.
State machine enforced server-side; invalid transitions return 409. Export satisfies data-portability rights; transfer moves services between organizations (owner only).
Deep documentation lives with each product.