Authentication

Reference: DeepWorkZone API — Authentication

---

OAuth Introspection — API Usage

All routes under /api/v1/public/** require OAuth authentication via a Multiplai access token passed as a Bearer token in the Authorization header.

Multiplai Access Token Required

The Public API does not accept regular session tokens. You must use your Multiplai access token to authenticate all requests under /api/v1/public/**.

---

How to Authenticate

Include your Multiplai access token in every request:

Authorization: Bearer YOUR_MULTIPLAI_ACCESS_TOKEN
Accept: application/json

---

Base URLs

Environment	Base URL
Production	https://api.deepworkzone.ai
Development	https://api-dev.deepworkzone.ai

The production base URL is configured via the VITE_API_URL environment variable in the desktop app.

---

Scope

This authentication method applies to all of the following API endpoints:

Available API

• Session — GET / POST / PUT / DELETE /api/v1/sessions
• Tasks — GET / POST / PUT / DELETE /api/v1/tasks
• User Stats — GET /api/v1/public/stats/:multiplai_id
• Session History — GET /api/v1/public/history/:multiplai_id

---

Error Responses

Requests with a missing or invalid token will return:

401 Unauthorized

{
  "message": "Unauthenticated."
}