Skip to content

Mobile API

The mobile API authenticates a user with a Bearer JWT obtained from /api/v1/mobile/auth. It is intended for mobile clients, not for browser sessions.

Use the mobile API

  1. Authenticate against /api/v1/mobile/auth.
  2. Send the returned token as Authorization: Bearer <token>.
  3. Follow the token lifecycle from the mobile client.

Mobile endpoints use the require_mobile_user dependency. Some features, such as the AI chat API, are mobile-only and do not have a web UI in this repository.

Scope

The mobile API is a separate client surface. It does not change the browser session model or the CSRF rules for the web UI.