Environments

Environment model

ChartHero's current public API hosts are shared by environment. Treat each host/key pair as a boundary: send a key only to the API host for the same environment.

These hosts are not organization-specific.

Base URL and version

Public REST routes live under /external/v1 for every environment.

https://api.charthero.ai/external/v1

The bundled OpenAPI artifact is published with these docs at /openapi/v1/openapi.json. The artifact describes the v1 contract for the current public hosts.

API keys

Every request must send the API key in the Authorization header using this exact format:

Authorization: Bearer <api_key>

Do not reuse production keys in local development, shared test tooling, browser code, mobile apps, logs, analytics events, screenshots, or support tickets. If a key may have crossed an environment boundary or been exposed, rotate it before retrying.

Access availability

Public route availability is controlled by environment rollout, and each request still requires the route's scope set plus same-organization, real-resource access. A valid key can still receive 403 when the route is unavailable, the key is missing a required scope, or the resource is not available to the caller organization.

Before using an environment, confirm the key, route availability, and required scopes for the integration.