Create an account. Passwords are stored as salted one-way hashes. The response sets a durable session cookie and also returns an application token for the X-Noah-App-Token header.

curl -X POST https://your-noah-host/api/account/register \
  -H "Content-Type: application/json" \
  -d '{"name":"Asha Patel","email":"asha@example.com","password":"at-least-8-chars"}'

Sign in with an existing account. The secure session cookie keeps the browser signed in across refreshes; tokens should only travel over HTTPS.

curl -X POST https://your-noah-host/api/account/login \
  -H "Content-Type: application/json" \
  -d '{"email":"asha@example.com","password":"at-least-8-chars"}'

Resolve the signed-in account and its current Credit snapshot.

curl https://your-noah-host/api/account/me \
  -H "X-Noah-App-Token: app_your_token"

Create a managed key from Dashboard → API management. The raw key is shown once and authorizes the official Claude Code gateway.

curl -X POST https://your-noah-host/api/account/api-keys \
  -H "Content-Type: application/json" \
  -H "X-Noah-App-Token: app_your_token" \
  -d '{"name":"production worker"}'

Read the active plan, remaining Credits, reset timestamps, and plan catalog. Use this endpoint to render a usage UI; do not calculate windows only in the browser.

curl https://your-noah-host/api/credits \
  -H "X-Noah-App-Token: app_your_token"

Create a saved conversation when the first real prompt is ready. The browser keeps a new-chat draft local, so repeated empty clicks do not create blank records. The returned chat_id is passed to the agent stream.

curl -X POST https://your-noah-host/api/chats \
  -H "Content-Type: application/json" \
  -H "X-Device-Id: dev_browser_id" \
  -d '{"title":"Product launch outline","model":"noah-opus-4-6","thinking":false}'

Append user or assistant content. Persisting both sides lets the dashboard and chat page reopen the same thread.

curl -X POST https://your-noah-host/api/chats/chat_example/messages \
  -H "Content-Type: application/json" \
  -H "X-Device-Id: dev_browser_id" \
  -d '{"message":{"role":"user","content":"Help me draft a launch plan."}}'

Create a revocable, read-only link for a chat owned by the current device. The public route exposes only the title, messages, and safe attachment labels.

curl -X POST https://your-noah-host/api/chats/chat_example/share \
  -H "X-Device-Id: dev_browser_id"

# Open the returned token at:
# /api/chats/shared/<share_token>

Model discovery for official Claude Code. The stable public profile is noah-opus-4-6.

curl https://noah.2bd.net/v1/models \
  -H "Authorization: Bearer noah_sk_your_key"

This is the standard Messages route used by official Claude Code. Noah accepts the request only with a valid API key and the Anthropic version header.

curl -X POST https://noah.2bd.net/v1/messages \
  -H "Authorization: Bearer noah_sk_your_key" \
  -H "anthropic-version: 2023-06-01" \
  -H "Content-Type: application/json" \
  -d '{"model":"noah-opus-4-6","max_tokens":1024,"stream":true,"messages":[{"role":"user","content":"hi"}]}'

Configure the official Claude Code client on the user's device. Never commit the API key or put it in Noah's server settings.

{
  "env": {
    "ANTHROPIC_BASE_URL": "https://noah.2bd.net",
    "ANTHROPIC_AUTH_TOKEN": "noah_sk_your_key",
    "ANTHROPIC_MODEL": "noah-opus-4-6"
  }
}

claude "hi"

Official Claude Code sends its declared tools with the request. Noah returns real Anthropic tool_use blocks; the installed CLI runs Read/Search/Edit/Write in the user's local workdir and sends standard tool_result blocks back.

{
  "model": "noah-opus-4-6",
  "tools": [
    {"name": "Read", "description": "Read a local file", "input_schema": {"type": "object"}},
    {"name": "Edit", "description": "Edit a local file", "input_schema": {"type": "object"}}
  ],
  "messages": [{"role": "user", "content": [
    {"type": "text", "text": "Find duplicate links in src/links.txt."}
  ]}]
}