Version: 0.2.1
EigenInteractive Engine API
The server-authoritative game engine API. Client routes (/api/engine/*) require a Firebase ID token; the external-bot webhook (/api/bot/action) is HMAC-authenticated.
Authentication
- HTTP: Bearer Auth
- API Key: botHmac
A Firebase ID token, sent as Authorization: Bearer <token> (or ?token= on WebSocket upgrades).
Security Scheme Type: | http |
|---|---|
HTTP Authorization Scheme: | bearer |
Bearer format: | JWT |
An external bot's HMAC signature over the exact request body, bound to the action domain. Scheme v1,<base64>; the per-bot key is HMAC(BOT_SIGNING_SECRET, botId). The engine signs wakes with the same header in the other direction.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | Eigen-Signature |