====== HTTP API conventions ======
HTTP API authentication, JSON shapes, error handling and request limits.

===== Scope =====
Use this page together with the device version, architecture and permission checks. Do not expose passwords, pairing codes, tokens or private keys. Validate a small operation first, keep a backup and confirm the final status and content hash.

===== Related guides =====
  * [[en:developer/transfers|Related guide]]
  * [[en:developer/cloud|Related guide]]
  * [[en:developer/webrtc|Related guide]]