All requests go to https://api.regionsync.org over TLS 1.2 or above. Authentication is a project token passed as a bearer credential. Tokens are scoped to a single project and can be rotated without redeploying anything.
curl -sS https://api.regionsync.org/v1/status \
-H "Authorization: Bearer $PROJECT_TOKEN"60 requests per minute per project token, measured over a sliding window. Exceeding the limit returns 429 with a Retry-After header. Bulk operations count once per call, not once per item.
Errors are returned as JSON with a stable code field. The HTTP status carries the class of failure; the code identifies the specific condition.
{
"error": {
"code": "token_expired",
"message": "The project token is no longer valid.",
"request_id": "7f3c1a9e"
}
}