Base URL
Authentication
All requests require an API key passed as a Bearer token:Creating an API key
Generate a key via the API (requires an active browser session):hm_live_xxxx) after creation.
Access scope
Your API key inherits your user permissions. You can access sessions you own or participate in, same as the web UI.Rate limits
API keys are limited to 100 requests per minute. Exceeding this returns429 Too Many Requests with a Retry-After header.
Error format
All errors follow a consistent structure:unauthorized, forbidden, not_found, validation_error, rate_limited, internal_error.