Projects

Projects are the top-level unit of tenancy. Creating one provisions an isolated project, runs schema setup, seeds system segments, and mints an initial client + server API key pair.

Endpoints

Method	Path	Description
POST	`/admin/projects`	Create a project (+ initial API keys, kicks off provisioning).
GET	`/admin/projects`	List all projects owned by the developer.
GET	`/admin/projects/:projectId`	Project details + API keys + integrations.
PATCH	`/admin/projects/:projectId`	Update name, bundle id, platform, environment.
DELETE	`/admin/projects/:projectId`	Delete the project record (stored data is not removed; contact Amba support to reclaim storage).
POST	`/admin/projects/:projectId/api-keys`	Mint an additional API key.
DELETE	`/admin/projects/:projectId/api-keys/:keyId`	Deactivate an API key.
POST	`/admin/projects/:projectId/reprovision`	Re-drive a failed or stalled provision.
GET	`/admin/projects/:projectId/provisioning-status`	Poll the project's provisioning status.

POST /admin/projects

Create a project.

Request

POST /admin/projects
Authorization: Bearer <developer-access-token>
Content-Type: application/json

Field	Type	Required	Description
`name`	string	yes	Display name.
`bundle_id`	string	no	Mobile app bundle id (used as default Apple audience).
`platform`	`"ios" \| "android" \| "all"`	no	Defaults to `"all"`.

Response 201

{
  "data": {
    "project": {
      "id": "…",
      "name": "…",
      "developer_id": "…",
      "platform": "all",
      "created_at": "…"
    },
    "api_keys": {
      "client": { "key": "amb_client_ck_…", "prefix": "amb_client_ck_xxxxxxxx", "type": "client" },
      "server": { "key": "amb_server_sk_…", "prefix": "amb_server_sk_xxxxxxxx", "type": "server" }
    },
    "provisioning_status": "provisioning"
  }
}

provisioning_status is "provisioning" if setup is in progress, "failed" if it didn't start (the project still exists — call POST /admin/projects/:projectId/reprovision to retry).

Errors

500 CREATE_FAILED — Amba API write failed.

Try it:

POST/admin/projects

developer auth

curl -X POST 'https://api.amba.dev/v1/admin/projects'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X POST '${BASE_URL}/admin/projects' \
  -H 'Authorization: Bearer ${DEV_TOKEN}' \
  -H 'Content-Type: application/json' \
  -d '{}'

GET /admin/projects

List all projects owned by the authenticated developer, newest first.

Response 200

{ "data": [ { "id": "…", "name": "…", "created_at": "…" }, … ] }

Try it:

GET/admin/projects

developer auth

curl -X GET 'https://api.amba.dev/v1/admin/projects'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X GET '${BASE_URL}/admin/projects' \
  -H 'Authorization: Bearer ${DEV_TOKEN}'

GET /admin/projects/:projectId

Fetch a single project with API keys (hashes only) and integrations.

Response 200

{
  "data": {
    "id": "…",
    "name": "…",
    "developer_id": "…",
    "bundle_id": "…",
    "platform": "all",
    "api_keys": [
      {
        "id": "…",
        "key_prefix": "amb_client_ck_xxxxxxxx",
        "key_type": "client",
        "environment": "development",
        "is_active": true,
        "created_at": "…",
        "last_used_at": null
      }
    ],
    "integrations": [
      {
        "id": "…",
        "provider": "revenuecat",
        "is_active": true,
        "config": {
          /* provider-specific */
        }
      }
    ]
  }
}

Errors

404 NOT_FOUND — project does not exist or is not owned by the developer.

Try it:

GET/admin/projects/%7B%7BprojectId%7D%7D

developer auth

curl -X GET 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X GET '${BASE_URL}/admin/projects/{projectId}' \
  -H 'Authorization: Bearer ${DEV_TOKEN}'

PATCH /admin/projects/:projectId

Update mutable fields. Unknown fields are silently ignored.

Request

Field	Type	Notes
`name`	string
`bundle_id`	string
`platform`	`"ios" \| "android" \| "all"`
`environment`	string	Developer-chosen label.

An empty body is a no-op that returns the current row.

Response 200

{ "data": { "id": "…", "name": "…", "updated_at": "…" } }

Errors

404 NOT_FOUND.
500 UPDATE_FAILED.

Try it:

PATCH/admin/projects/%7B%7BprojectId%7D%7D

developer auth

curl -X PATCH 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X PATCH '${BASE_URL}/admin/projects/{projectId}' \
  -H 'Authorization: Bearer ${DEV_TOKEN}' \
  -H 'Content-Type: application/json' \
  -d '{}'

DELETE /admin/projects/:projectId

Delete the project record. Stored data is not removed — contact Amba support to reclaim storage.

Response 200

{ "data": { "deleted": true } }

Errors

404 NOT_FOUND.
500 DELETE_FAILED.

Try it:

DELETE/admin/projects/%7B%7BprojectId%7D%7D

developer auth

curl -X DELETE 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X DELETE '${BASE_URL}/admin/projects/{projectId}' \
  -H 'Authorization: Bearer ${DEV_TOKEN}'

POST /admin/projects/:projectId/api-keys

Mint an additional API key.

Request

Field	Type	Required	Allowed values
`key_type`	string	yes	`"client"`, `"server"`
`environment`	string	yes	`"development"`, `"production"`

Response 201

{
  "data": {
    "key": "amb_client_ck_…",
    "prefix": "amb_client_ck_xxxxxxxx",
    "type": "client",
    "environment": "production"
  }
}

The full key is returned ONCE and never again — the Amba API stores only a bcrypt-like hash.

Errors

400 INVALID_INPUT — bad key_type or environment.
404 NOT_FOUND.
500 CREATE_FAILED.

Try it:

POST/admin/projects/%7B%7BprojectId%7D%7D/api-keys

developer auth

curl -X POST 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D/api-keys'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X POST '${BASE_URL}/admin/projects/{projectId}/api-keys' \
  -H 'Authorization: Bearer ${DEV_TOKEN}' \
  -H 'Content-Type: application/json' \
  -d '{}'

DELETE /admin/projects/:projectId/api-keys/:keyId

Deactivate (is_active = false) an API key. Subsequent requests with that key fail 401 UNAUTHORIZED.

Response 200

{ "data": { "revoked": true } }

Errors

404 NOT_FOUND.
500 REVOKE_FAILED.

Try it:

DELETE/admin/projects/%7B%7BprojectId%7D%7D/api-keys/%7B%7BkeyId%7D%7D

developer auth

curl -X DELETE 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D/api-keys/%7B%7BkeyId%7D%7D'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X DELETE '${BASE_URL}/admin/projects/{projectId}/api-keys/{keyId}' \
  -H 'Authorization: Bearer ${DEV_TOKEN}'

POST /admin/projects/:projectId/reprovision

Re-drive a failed or stalled provisioning job. Idempotent — duplicate POSTs collapse onto the same job id. Concurrent calls serialize so two reprovisions can't run side-by-side.

Response 200

{
  "data": {
    "projectId": "…",
    "job_id": "reprovision-<project>-<ms>",
    "status": "provisioning"
  }
}

If a prior provisioning attempt is already running at the same millisecond, the response additionally includes "collapsed": true.

Errors

404 NOT_FOUND — project not owned by the developer.
409 ALREADY_ACTIVE — project is already active; reprovision is not permitted.
409 ARCHIVED — archived projects cannot be reprovisioned.
409 PROVISIONING_IN_PROGRESS — provisioning is already running. error.details.job_id + .status describe it.
502 REPROVISION_FAILED — Amba's provisioning subsystem refused the request; the change was rolled back.
500 REPROVISION_FAILED — unexpected error.

Try it:

POST/admin/projects/%7B%7BprojectId%7D%7D/reprovision

developer auth

curl -X POST 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D/reprovision'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X POST '${BASE_URL}/admin/projects/{projectId}/reprovision' \
  -H 'Authorization: Bearer ${DEV_TOKEN}' \
  -H 'Content-Type: application/json' \
  -d '{}'

GET /admin/projects/:projectId/provisioning-status

Poll the current provisioning state for a project. Safe to poll every few seconds.

Response 200

{
  "data": {
    "projectId": "…",
    "status": "active",
    "provisioned_at": "…",
    "region": "us-east-1"
  }
}

status is one of not_provisioned | provisioning | active | failed. provisioned_at is null until the project transitions to active. region is null for not_provisioned.

Errors

404 NOT_FOUND.
500 PROVISIONING_STATUS_FAILED.

Try it:

GET/admin/projects/%7B%7BprojectId%7D%7D/provisioning-status

developer auth

curl -X GET 'https://api.amba.dev/v1/admin/projects/%7B%7BprojectId%7D%7D/provisioning-status'

Loading auth… Configure auth in the settings drawer (top-right) to run this request.

Curl:

curl -X GET '${BASE_URL}/admin/projects/{projectId}/provisioning-status' \
  -H 'Authorization: Bearer ${DEV_TOKEN}'

On this page