Base URL
How authentication works
The API uses a two-step, key → token flow:1
Get your credentials
A studio admin creates your partner record in Partners inside the OriginX dashboard, grants per-series access (
read and/or stream), and shares your API key and API secret. The secret is shown once — store it securely.2
Exchange them for a token
POST /api/partner/auth with { "api_key", "api_secret" }. You get back a JWT valid for 24 hours.3
Call the API with the token
Send the token as
Authorization: Bearer <token> on every other endpoint. Use GET /api/partner/auth/verify to check a token is still valid.Rate limits
Exceeding a limit returns
429 Too Many Requests. The SDK retries with exponential backoff.