Skip to content
Misar.io
API Reference

Misar API Reference

REST APIs, authentication guides, webhooks, and error references for every Misar product.

Authentication

Authentication

All Misar APIs authenticate via API key passed as a Bearer token in the Authorization header.

Authorization Header

Pass your API key as a Bearer token on every request.

Authorization: Bearer msk_your_api_key

Example Request

A typical authenticated cURL call.

curl -X POST https://api.misar.io/mail/v1/send \
  -H "Authorization: Bearer msk_key" \
  -H "Content-Type: application/json" \
  -d '{"to":"[email protected]"}'

Key Prefixes by Product

API keys are prefixed per product for easy identification.

  • msk_Misar Mail
  • ask_Assisters.io
  • mdk_Misar Dev

Security Best Practices

Keep your API keys secure and never expose them in client-side code.

  • • Store keys in environment variables only
  • • Use separate keys per environment
  • • Rotate keys immediately if compromised
  • • Restrict permissions to required scopes

REST APIs by Product

Select a product to explore its API documentation.

Misar.AI

Coming Soon

REST API for AI-powered app and web development workflows.

Assisters.io

Launching

REST API for AI assistant management and workforce automation.

Misar Mail

Live

REST API for transactional and marketing email delivery.

Misar Dev

Live

REST API for AI developer tools and Claude Code plugin management.

Misar Blog

Coming Soon

REST API for AI-first blogging, posts, and publication management.

Misar Tools

Live

REST API for free AI calculators and developer tool integrations.

Webhooks

Webhooks

Receive real-time event notifications via HTTP callbacks when events occur in Misar products.

Webhook Payload

Misar sends a signed POST request to your endpoint when an event fires.

POST https://your-app.com/webhooks
X-Misar-Signature: sha256=abc123

{
  "event": "email.delivered",
  "timestamp": "2025-01-01T00:00:00Z",
  "data": { "id": "msg_123" }
}

Signature Verification

Always verify the signature to ensure the request came from Misar.

import crypto from "node:crypto";

function verify(body, sig, secret) {
  const mac = crypto
    .createHmac("sha256", secret)
    .update(body).digest("hex");
  return `sha256=${mac}` === sig;
}

Common Events

Event types vary by product. Examples from Misar Mail:

  • email.delivered
  • email.bounced
  • email.opened
  • email.clicked

Best Practices

Follow these guidelines for reliable webhook handling:

  • • Respond with 2xx within 10 seconds
  • • Process events asynchronously (use a queue)
  • • Handle duplicate events idempotently
  • • Always verify the HMAC signature

Need API access or support?

Contact our team for early API access, custom rate limits, or integration help.