How it works

Platform API

The API base is https://api.devoracloud.com/v1. Create a scoped API key in the account tools and send Authorization: Bearer YOUR_KEY. A key belongs to one organization and gives access only to it. A key cannot create another key: POST /v1/api-keys called with a key returns 403 FORBIDDEN; only a logged-in person creates keys, in the dashboard. Never expose a secret API key to browser code.

Requests are limited by organization membership, key permissions and plan capacity. PLAN_LIMIT_EXCEEDED (HTTP 402) requires reducing reserved resources or upgrading; details carries resource, limit and used. With resource "subscription" the trial ended or an invoice is unpaid. POST /v1/projects/:id/scale accepts up to the plan ceiling (the failover standby is included and stays off); extra copies for autoscaling or load balancing are billed hourly up to the plan ceiling (Hobby 2, Pro 3, Enterprise 5) and need a paid plan in good standing; during the trial or with an unpaid invoice the API answers 402. Blindly retrying does not increase capacity.