Authenticate

Use the same token you mint on API keys for MCP. How to create it is in Create an API key.

Headers

Send this on every request:

Authorization: Bearer rmr_YOUR_TOKEN

Missing or revoked tokens return HTTP 401 with "code": "UNAUTHORIZED".

On POST, also send idempotency_key in the JSON body, at least 8 characters. You may send Idempotency-Key as a header instead. Reuse the same key on retry. MCP and REST share the key per workspace, so the same key will not spend twice. See Idempotency.

First call to copy

Replace the token, then run this. It spends nothing.

export HOST=https://rumora.ai
export TOKEN='rmr_YOUR_TOKEN'

curl -sS "$HOST/api/v1/usage" \
  -H "Authorization: Bearer $TOKEN"

You should see credits_left. Then post a comment:

curl -sS -X POST "$HOST/api/v1/comments" \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "video_url": "https://www.youtube.com/watch?v=VIDEO",
    "text": "Useful breakdown of this.",
    "idempotency_key": "comment-1"
  }'

Copy id, then poll GET /api/v1/status/THREAD_ID. When identity is present, like or reply with those fields. Live minimums are in the usage call. The full sequence is First agent request.