Misar API Reference
REST APIs, authentication guides, webhooks, and error references for every Misar product.
Authentication
All Misar APIs authenticate via API key passed as a Bearer token in the Authorization header.
Authorization Header
Pass your API key as a Bearer token on every request.
Authorization: Bearer msk_your_api_key
Example Request
A typical authenticated cURL call.
curl -X POST https://api.misar.io/mail/v1/send \
-H "Authorization: Bearer msk_key" \
-H "Content-Type: application/json" \
-d '{"to":"[email protected]"}'Key Prefixes by Product
API keys are prefixed per product for easy identification.
msk_Misar Mailask_Assisters.iomdk_Misar Dev
Security Best Practices
Keep your API keys secure and never expose them in client-side code.
- • Store keys in environment variables only
- • Use separate keys per environment
- • Rotate keys immediately if compromised
- • Restrict permissions to required scopes
REST APIs by Product
Select a product to explore its API documentation.
MisarMail
Transactional and marketing email for modern teams.
Misar.Dev
Open-source AI developer tools and Claude Code plugins.
Misar.Blog
AI-first blogging platform with built-in AEO and SEO.
Assisters.io
Enterprise AI assistant platform and workforce automation.
MisarPost
AI social media automation — publish, schedule, and grow.
MisarReach
Multi-channel outreach, lead finder, and CRM.
Misar.AI
AI-powered app and web development platform.
Webhooks
Receive real-time event notifications via HTTP callbacks when events occur in Misar products.
Webhook Payload
Misar sends a signed POST request to your endpoint when an event fires.
POST https://your-app.com/webhooks
X-Misar-Signature: sha256=abc123
{
"event": "email.delivered",
"timestamp": "2025-01-01T00:00:00Z",
"data": { "id": "msg_123" }
}Signature Verification
Always verify the signature to ensure the request came from Misar.
import crypto from "node:crypto";
function verify(body, sig, secret) {
const mac = crypto
.createHmac("sha256", secret)
.update(body).digest("hex");
return `sha256=${mac}` === sig;
}Common Events
Event types vary by product. Examples from Misar Mail:
email.deliveredemail.bouncedemail.openedemail.clicked
Best Practices
Follow these guidelines for reliable webhook handling:
- • Respond with 2xx within 10 seconds
- • Process events asynchronously (use a queue)
- • Handle duplicate events idempotently
- • Always verify the HMAC signature
Need API access or support?
Contact our team for early API access, custom rate limits, or integration help.