FAQs

Where is the API hosted?

All public REST and OAuth endpoints are at https://api.8ball.live.

The developer console (app registration, API keys, OAuth consent) is at dev.8ball.live.

Is there an OpenAPI spec?

Yes. It is publicly available without authentication:

• Interactive explorer: api.8ball.live/openapi
• JSON download: api.8ball.live/openapi/json

See OpenAPI for usage tips.

How do I authenticate?

Send Authorization: Bearer <token> on every API request.

Use an OAuth access token when your integration acts on behalf of a user, or an API key for server-side automations.

How are webhooks signed?

Each delivery includes an 8ball-signature header with format t=<unix>,v1=<hex>. Verify HMAC SHA-256 over timestamp.body using your endpoint signing secret.

Can API keys call user-specific endpoints?

No. Endpoints like GET /v1/users/me require a user OAuth token.

Where do I manage apps and keys?

In the developer console.

How do I get support?

Check Errors for common API error codes. For platform issues, contact 8BALL support through your account.