# di3 API

> API for di3 canvases. Authenticate with Authorization: Bearer <your_api_key>.

Base URL: https://forefy.com
Version: 1.0.0

## API reference

- [Interactive API reference](https://forefy.com/docs): Explore and try every endpoint in the browser.
- [OpenAPI 3.0 spec (JSON)](https://forefy.com/docs/openapi.json): Machine-readable API document.
- [OpenAPI 3.0 spec (YAML)](https://forefy.com/docs/openapi.yaml): Same document in YAML.
- [Full endpoint reference](https://forefy.com/llms-full.txt): Every endpoint with descriptions in one file.

## Authentication

Send an API key as a bearer token: `Authorization: Bearer d3k_<token>`. Create and revoke keys via the `/api/user/api-keys` endpoints. A key can be scoped to a single canvas (an "Agent" key) for least-privilege AI-agent access.

## Endpoints

- `GET /api/canvases` - List all canvases accessible to the authenticated user
- `POST /api/canvases` - Create a new canvas
- `GET /api/canvases/{id}` - Get a single canvas by ID
- `PUT /api/canvases/{id}` - Update a canvas
- `DELETE /api/canvases/{id}` - Delete a canvas
- `GET /api/user/api-keys` - List all API keys for the current user
- `POST /api/user/api-keys` - Create a new API key (the raw key is returned once - store it securely)
- `DELETE /api/user/api-keys/{id}` - Revoke an API key