DocsUpdated: April 20268 min read

REST API Reference

Documented backend routes used by desktop, web, and mobile clients.

Download AppSecurity Policy

Core Service Routes

  • GET /api/health
  • GET /api/version
  • GET /api/version?platform=windows&product=core&architecture=x64
  • GET /api/download/windows?product=core&architecture=x64
  • GET /api/download/macos?product=ops&architecture=universal

Auth Routes

  • POST /api/auth/login
  • POST /api/auth/register
  • POST /api/auth/signup
  • POST /api/auth/reset/request
  • POST /api/auth/reset/confirm
  • POST /api/auth/account/delete
  • GET /api/auth/account/export
  • NextAuth: /api/auth/[...nextauth]

Sync and Share Routes

  • POST /api/clip and GET /api/clip
  • POST /api/private-share/create and GET /api/private-share/[sessionId]/status
  • POST /api/secure-drop/create
  • POST /api/pwa/share

Billing Routes

  • GET /api/subscription/status
  • POST /api/subscription/revenuecat-webhook
  • POST /api/subscription/checkout returns 410 Gone after RevenueCat migration
  • POST /api/subscription/webhook returns 410 Gone after LemonSqueezy migration

Notification Registration Routes

  • POST /api/push/register (iOS token registration; delivery requires signed-device APNs evidence)
  • GET /api/push/devices
  • DELETE /api/push/devices/[deviceId]

Example: Service Version

Fetch version metadatabash
curl -s 'https://quilon.dev/api/version?platform=windows&product=core&architecture=x64' | jq
REST API Reference | Quilon Docs