Quick start with Novada APIs

---

Overview

Welcome to the Novada Public API. This document provides a complete interface specification for programmatically interacting with the Novada platform. Use this API to securely and efficiently manage and call the platform’s compute and proxy services.

Getting Started

To use the Novada Public API, you must obtain credentials to ensure secure access.

Steps:

1. Retrieve Credentials Log in to the Novada Dashboard → Account Settings → My Account → API Key Copy your username and API Key (API Key can be rotated)

2. Obtain an Access Token You must acquire an access_token to invoke Public API endpoints The default validity of access_token is 7 days — rotate it regularly or automate refresh Use your credentials to call the authentication endpoint and request a token

3. Make API Calls Include the token in the request header to access all other business APIs

---

Example: Create a Proxy Account

# Step 2. Get an access token
curl -X POST https://api-m.novada.com/v1/oauth2/token \
  -u "your_username:your_api_key"

# Step 3. Use the token to create a resource (assuming a token “eyJhbG...” is returned)
curl -X POST https://api-m.novada.com/v1/proxy_account/create \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." \
  -H "Content-Type: application/json" \
  -d '{"name": "my_agent", "type": "standard"}'

---

Obtain Access Token

Request POST https://api-m.novada.com/v1/oauth2/token

Authentication Method HTTP Basic Authentication

• Username: Your Novada API username

• Password: Your Novada API key

Response Example

{
  "code": 0,
  "data": {
    "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
    "expires_in": 604800,
    "token_type": "bearer"
  },
  "msg": "success",
  "timestamp": 1747036799
}

---

Use the Access Token

After the token is obtained, include it in the Authorization header for all subsequent requests:

POST https://api-m.novada.com/v1/proxy_account/create
Authorization: Bearer <access_token>

---

Security Best Practices

1. Protect Credentials Your API key is equivalent to a password—do not expose it in client code or public repositories

2. Token Storage Store tokens securely in server-side encrypted memory or protected storage

3. Regular Rotation Rotate your API keys frequently in the dashboard, especially if compromise is suspected

---