FutPicks Support
Overview
FootballLab API v1
Section titled “FootballLab API v1”FootballLab / FutPicks API v3.1 — Secure API Layer.
Authentication: All endpoints require JWT Bearer token.
Authorization:
- Ops endpoints (
/api/v1/ops/*) require Admin policy (admin role). - Data endpoints (
/api/v1/data/*) require ProTier policy (pro or admin subscription).
Error Handling: All errors use RFC 9457 application/problem+json format.
Idempotency: Mutating operations require Idempotency-Key header.
Rate Limiting: Rate limit headers included in responses.
Pagination: List endpoints use cursor or page-based pagination with bounded limits.
Webhooks: HMAC-SHA256 signed deliveries with retry/backoff.
Exports: 24-hour TTL with secure download tokens.
See /docs/ops-api.md and /docs/data-api.md for detailed endpoint documentation.
Authentication
Section titled “ Authentication ”Bearer
Section titled “Bearer ”JWT Authorization header using the Bearer scheme. Enter your token in the text input below.
Example: “abc123def456…”
Anonymous requests receive 401. Free users receive 403 for Data API.
Security scheme type: http
Bearer format: JWT