Developer API

The future authenticated API is intended for legitimate QA and CI verification testing—not mass account creation.

Planned foundation

• one-time API keys stored as prefix plus hash;
• atomic minute/month quotas and concurrency limits;
• OTP extraction, webhooks/SSE, deterministic helpers, and auditability;
• a separate registrable mail-domain pool to isolate automated workloads;
• no unlimited tier.

Public beta and billing are intentionally not active yet.