Tenant / user API
Bearer JWT obtained from the login flow. Every request is scoped to the caller’s org_id.
The Helios REST API is served by the FastAPI backend at https://app.himaya.ai. Interactive Swagger docs are available at /docs.
https://app.himaya.aiHelios uses two distinct auth schemes depending on the endpoint:
Tenant / user API
Bearer JWT obtained from the login flow. Every request is scoped to the caller’s org_id.
Admin (vendor) API
Send X-Admin-API-Key: <VENDOR_ADMIN_API_KEY> to reach protected endpoints under /api/admin/*.
curl https://app.himaya.ai/api/admin/orgs \ -H "X-Admin-API-Key: $VENDOR_ADMIN_API_KEY"curl https://app.himaya.ai/health