POST /api/chat
Public access · HTTP API reference
All endpoints · Authentication and retries · Download OpenAPI
- Attachments contain extracted text, not raw uploads. At most four attachments and 24,000 total content characters are accepted.
- Protected writes require an allowed Origin, the CSRF cookie and matching X-CSRF-Token header.
Request
| Parameter | Location | Type and requirement |
|---|---|---|
x-idempotency-key | header | string · optional Pattern: |
Origin | header | string · required An origin allowed by this deployment. |
X-CSRF-Token | header | string · required Must match the CSRF cookie issued to this browser. |
Body · application/json
message required · stringconversationId optional · stringattachments optional · array of objectmaxItems: 4
View attachments model
Array items:
fileName required · stringminLength: 1. maxLength: 120
mimeType required · stringminLength: 1. maxLength: 120
sizeBytes required · numberminimum: 0. maximum: 2000000
content required · stringminLength: 1. maxLength: 12000
Example
Examples use fictional data. Replace identifiers with resources you can access. For account requests, cookies.txt must contain your own session; set CSRF_TOKEN to the matching CSRF cookie value where required.
{
"message": "Explain the data used in this research."
}curl --include \
--request POST \
'https://api.weavers.app/api/chat' \
--cookie cookies.txt --cookie-jar cookies.txt \
--header 'Origin: https://weavers.app' \
--header "X-CSRF-Token: ${CSRF_TOKEN}" \
--header 'Content-Type: application/json' \
--data-binary @request.jsonResponses
200 · Successful response.
application/json
{
"reply": "example",
"conversationId": "1",
"provider": "github"
}View response model
reply required · stringconversationId required · stringprovider required · stringAdditional fields: JSON values.
400 · Invalid request.
application/json
{
"error": "example"
}View response model
Variant 1: object
error required · stringAdditional fields: JSON values.
Variant 2: object
error required · stringcode required · stringAdditional fields: JSON values.
401 · Authentication is missing or invalid.
application/json
{
"error": "example"
}View response model
Variant 1: object
error required · stringAdditional fields: JSON values.
409 · Revision, state or idempotency conflict.
application/json
{
"error": "example",
"code": "example"
}View response model
error required · stringcode required · stringAdditional fields: JSON values.
429 · Rate limit reached; honor Retry-After when supplied.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
500 · Server failure.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
502 · Dependency failure.
application/json
{
"error": "example",
"code": "example"
}View response model
error required · stringcode required · stringAdditional fields: JSON values.
503 · Service or dependency unavailable.
application/json
{
"error": "example",
"code": "example"
}View response model
error required · stringcode required · stringAdditional fields: JSON values.
default · Operation-specific error. Inspect error/code before deciding whether to retry.
application/json
{
"error": "example",
"code": "example"
}View response model
error required · stringcode required · stringAdditional fields: JSON values.