app.ontora.com uses US, while eu.ontora.com uses EU. API keys are
region-bound.
Authentication
For programmatic integrations, use a workspace API key:Authorization: Bearer <token>), and the protected-corpus
endpoints require a
Confidential analysis key.
See Authentication for scopes and rotation.
Versioning
The API is versioned in the path. The current stable version isv1 (US shown):
v2. Additive changes (new fields, new endpoints) ship in v1 without a version bump.
Content types
- Requests:
application/json - Responses:
application/jsonunless otherwise specified - Exports:
text/markdownorapplication/zip