Skip to main content

Base URL

https://europe-west1-slideless-ai.cloudfunctions.net
All endpoints are Cloud Functions in europe-west1. There is no API versioning in v1 — the URL above is the only stable one.

Authentication

Every endpoint (except getSharedPresentation, which is token-based) requires the X-Process-Manager-Key header:
X-Process-Manager-Key: cko_your_organization_api_key
Two key formats are accepted:
PrefixTypeWhen to use
cko_Organization API keyAlmost always
cka_Admin API keyInternal platform tooling only
See Authentication and API keys for the full story.

Error format

Errors return a JSON body with error (human-readable) and code (machine-readable):
{
  "error": "Invalid or missing API key.",
  "code": "unauthenticated"
}
The verifyApiKey endpoint uses a slightly different shape ({ success, error: { message }, requestId }) — see its reference page.

Status codes

StatusMeaning
200Success
400Bad request — missing or invalid arguments
401Missing or invalid API key
403Authenticated but not allowed (wrong owner, revoked token, missing scope)
404Resource not found, or generically returned to prevent enumeration of share IDs
405Wrong HTTP method
410Gone — share expired or presentation archived
413Payload too large (> 10 MB on upload/update)
500Internal error — retry with backoff

Endpoint index

EndpointMethodAuthPurpose
/uploadSharedPresentationPOSTAPI keyCreate a new presentation
/updateSharedPresentationPOSTAPI keyReplace HTML at an existing share (URL preserved)
/listMyPresentationsPublicGETAPI keyList your presentations (cap: 100)
/getSharedPresentationInfoPublic/{shareId}GETAPI keyFull metadata + token list for one presentation
/getSharedPresentation/{shareId}GETToken in URLPublic — returns the raw HTML; increments view counts
/verifyApiKeyPOSTAPI keyValidate a key, return its metadata

Limits

LimitValue
Upload / update HTML size10 MB per request
List response cap100 presentations (no cursor pagination in v1)
Per-key rate limitNone enforced in v1
API keys per organization20

CORS

All HTTP endpoints set cors: true — they accept browser requests from any origin. The auth header (X-Process-Manager-Key) is allowed.

Idempotency

uploadSharedPresentation is not idempotent — every call creates a new presentation with a new shareId. To re-publish to the same URL, use updateSharedPresentation instead.

Next