Developer docs for event-first signals.
Authentication, endpoint posture, schema versioning, and evidence-gated webhook rules for teams evaluating or operating the ZettaWire Signals API.
Base
api.zettawire.com/api
Auth
X-API-Key
Schema
2026-04-22
Delivery
Polling + approved webhooks
Endpoint ledger.
Request and response posture.
Request
Authenticated story feed
Customer keys ride in the X-API-Key header. Account-backed keys are managed through the API keys surface.
curl -H "X-API-Key: $ZETTAWIRE_API_KEY" \
"https://api.zettawire.com/api/v1/stories?category=security"Response
Versioned envelope
Store the schema version with processed events and keep parsers tolerant of additive fields.
HTTP/2 200 OK
content-type: application/json
x-ratelimit-remaining: 59
{
"schema_version": "2026-04-22",
"data": [
{
"event_id": "evt_20260422_red_sea_18431",
"story_id": "signal-18431",
"canonical_url": "https://zettawire.com/stories/signal-18431",
"confirmation_status": "developing"
}
]
}Client contract.
Authentication
Send customer keys with X-API-Key. Public evaluation stays rate-limited; paid keys are account-backed and visible in /api-keys.
Rate posture
Starter, Growth, and Enterprise packages receive separate throughput, archive, and webhook controls. Usage is metered by account and key.
Schema safety
Current public docs target schema_version 2026-04-22. Clients should store schema_version and ignore unknown fields.
Evidence-gated webhooks
Webhook delivery requires the package entitlement plus written approval evidence. Use event_id for dedupe, verify signatures when enabled, and fall back to canonical_url for analyst handoff.
Source notes
Keep downstream systems explicit.
Signals can be early, developing, or source-limited. The payload includes posture fields so clients can decide how aggressively to automate.
- Persist `schema_version` and `event_id` with each processed signal.
- Use `canonical_url` when routing analysts back to human-readable context.
- Back off on 429 responses and separate approval-gated webhook delivery from polling.
- Do not treat `developing` or `single_source` events as fully confirmed.
Beta access
Request Signals API beta access with source attribution.
We use this form to understand developer demand, integration use cases, and which public pages produce qualified API leads.
Attribution
Submissions are stored through newsletter attribution today, so the growth dashboard can group leads by page, campaign, and source while we keep API-key issuance entitlement-gated.