Misar API Reference
REST APIs, authentication guides, webhooks, and error references for every Misar product.
Authentication
All Misar APIs authenticate via API key passed as a Bearer token in the Authorization header.
Authorization Header
Pass your API key as a Bearer token on every request.
Authorization: Bearer msk_your_api_key
Example Request
A typical authenticated cURL call.
curl -X POST https://api.misar.io/mail/v1/send \
-H "Authorization: Bearer msk_key" \
-H "Content-Type: application/json" \
-d '{"to":"[email protected]"}'Key Prefixes by Product
API keys are prefixed per product for easy identification.
msk_Misar Mailask_Assisters.iomdk_Misar Dev
Security Best Practices
Keep your API keys secure and never expose them in client-side code.
- • Store keys in environment variables only
- • Use separate keys per environment
- • Rotate keys immediately if compromised
- • Restrict permissions to required scopes
REST APIs by Product
Select a product to explore its API documentation.
Misar.AI
REST API for AI-powered app and web development workflows.
Assisters.io
REST API for AI assistant management and workforce automation.
Misar Mail
REST API for transactional and marketing email delivery.
Misar Dev
REST API for AI developer tools and Claude Code plugin management.
Misar Blog
REST API for AI-first blogging, posts, and publication management.
Misar Tools
REST API for free AI calculators and developer tool integrations.
Webhooks
Receive real-time event notifications via HTTP callbacks when events occur in Misar products.
Webhook Payload
Misar sends a signed POST request to your endpoint when an event fires.
POST https://your-app.com/webhooks
X-Misar-Signature: sha256=abc123
{
"event": "email.delivered",
"timestamp": "2025-01-01T00:00:00Z",
"data": { "id": "msg_123" }
}Signature Verification
Always verify the signature to ensure the request came from Misar.
import crypto from "node:crypto";
function verify(body, sig, secret) {
const mac = crypto
.createHmac("sha256", secret)
.update(body).digest("hex");
return `sha256=${mac}` === sig;
}Common Events
Event types vary by product. Examples from Misar Mail:
email.deliveredemail.bouncedemail.openedemail.clicked
Best Practices
Follow these guidelines for reliable webhook handling:
- • Respond with 2xx within 10 seconds
- • Process events asynchronously (use a queue)
- • Handle duplicate events idempotently
- • Always verify the HMAC signature
Need API access or support?
Contact our team for early API access, custom rate limits, or integration help.