Skip to main content

Notification APIs

Version: aju17f20mq

Use the reference below for request and response fields and operation-specific requirements.

Overview

Register devices, read inbox messages and manage notification preferences, workflows and dispatch. Provider and channel availability depend on deployment configuration.

Authentication​

User-facing calls act for the authenticated beneficiary. A backend sk_… key uses an authorized X-On-Behalf-Of selection with users:impersonate; a client pk_… key accompanies that user’s JWT from the configured issuer. Never expose a secret key in a client. Raw identity headers and recipient IDs are not authentication. See Authentication.

Public management operations under /manage/ belong in trusted backend tooling. The API accepts a verified backend key or configured standalone JWT for tenant-context management; it does not enforce an operation-specific admin role or permission there. Do not treat this acceptance as a secure admin authorization contract. Restrict access at your application boundary. Get/update/delete of the caller’s subscriber profile still require user context.

Tenant context comes from the authenticated request. Client-supplied X-Tenant-Id, X-User-Id or X-Project-Id do not grant authority. The current public integration uses the default project. Do not rely on project headers for separate project, test/live or customer isolation on this API.

Send acknowledgements mean the provider accepted a trigger, not that a recipient received or read it. Preference state, channel registration and topic membership do not by themselves establish consent or sending authority.

Related guide: Notifications

JSON conventions​

Requests accept snake_case or camelCase field names; responses use camelCase. Ordinary default-valued scalars and empty repeated fields can be omitted. Explicitly present optional scalars, map values and well-known JSON types follow their own presence rules: an explicit false, 0 or empty value is not universally equivalent to absence. Decode each field according to its schema. 64-bit integers use JSON strings; preserve their precision. Unknown request fields are generally discarded before validation, so a typo can silently change behavior. This is not a guarantee that arbitrary fields or future client contracts are supported. See API conventions.

User: Channel Registration​

Register and manage push notification devices and channels. See the Notifications guide.

User: In-App Inbox​

Real-time in-app inbox — session token, feed, mark, and delete. See the Notifications guide.

User: Preferences​

Get and update per-channel notification preferences. See the Notifications guide.

Management: Notification Dispatch​

Send, broadcast, bulk-send, topic-send, and cancel notifications. See the Notifications guide.

Management: Topics​

Pub/sub fan-out — create topics, manage subscribers, send to topic. See the Notifications guide.

Management: Digest​

Batched digest delivery and cancellation. See the Notifications guide.

Management: Subscribers​

Create, read, update, delete, and list notification subscribers. See the Notifications guide.

Management: Activity & Status​

Query delivery status and notification activity logs. See the Notifications guide.

Management: Providers​

Configure and list delivery providers (FCM, SendGrid, etc.). See the Notifications guide.

Management: Workflows​

Create, update, get, list, and delete notification workflows. See the Notifications guide.

Server 1​

Travila API

https://api.travila.ai

X-API-Key​

Project/service API key. Use pk_… only with a verified end-user JWT; backend sk_… calls that require a user use authorized on-behalf-of context. Management operations can have different requirements; consult the operation and authentication guide.

X-On-Behalf-Of​

The end user this call acts for. Required with an sk_… key, because a secret key identifies your tenant and not a user; omitting it returns 401 authenticated user_id is required. The key needs the users:impersonate scope or the call fails with 403 insufficient_scope.

Authorization: Bearer​

JWT verified by the configured issuer. User-facing calls require an effective user. Tenant-context management currently accepts verified JWT context without a separate operation/admin-role check. Keep management operations in trusted backend tooling; a valid JWT alone is not an administrator permission.

Authentication credentials

SettingValue
Security scheme typeapiKey
header parameter nameX-API-Key

Operations​

Document ID: DOC-API-notifications-overview. Section identities and revisions.

SectionStable reference
OverviewDOC-API-notifications-overview#overview
AuthenticationDOC-API-notifications-overview#authentication
JSON conventionsDOC-API-notifications-overview#json-conventions
User: Channel RegistrationDOC-API-notifications-overview#reference-group-1
User: In-App InboxDOC-API-notifications-overview#reference-group-2
User: PreferencesDOC-API-notifications-overview#reference-group-3
Management: Notification DispatchDOC-API-notifications-overview#reference-group-4
Management: TopicsDOC-API-notifications-overview#reference-group-5
Management: DigestDOC-API-notifications-overview#reference-group-6
Management: SubscribersDOC-API-notifications-overview#reference-group-7
Management: Activity & StatusDOC-API-notifications-overview#reference-group-8
Management: ProvidersDOC-API-notifications-overview#reference-group-9
Management: WorkflowsDOC-API-notifications-overview#reference-group-10
Server 1DOC-API-notifications-overview#reference-server-1
X-API-KeyDOC-API-notifications-overview#authentication-apiKeyAuth
X-On-Behalf-OfDOC-API-notifications-overview#authentication-onBehalfOf
Authorization: BearerDOC-API-notifications-overview#authentication-bearerAuth