Thalamus Lite — Edge API
The consumer-facing API any brand touchpoint (website, app, POS, promoter app, partner backend) calls to build its UI. Thalamus Lite owns all consumer identity, business logic, and data — the touchpoint only renders screens and calls this API.
This spec covers the public /api/v1/* surface only. It does not cover the internal
control-plane (/api/internal/*, private-network callers only) or the public email opt-out
routes (/unsubscribe/**, used by marketing-email links, not called by touchpoint apps).
See the Authentication and Errors & rate limits guides for the concepts behind every call, and the full-process guides for end-to-end walkthroughs.
Authentication
- API Key: TouchpointCode
- API Key: TouchpointKey
- HTTP: Bearer Auth
Identifies the calling app. Obtained once when a Business admin creates the touchpoint in BackOffice.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | X-Touchpoint-Code |
The touchpoint's secret, paired with X-Touchpoint-Code. Never log it.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | X-Touchpoint-Key |
Customer JWT returned by register/complete, register, login, or identify.
Security Scheme Type: | http |
|---|---|
HTTP Authorization Scheme: | bearer |
Bearer format: | JWT |
Contact
Thalamus Lite platform team: