API

The full OpenAPI 3.1 spec is hosted at https://api.adnet.example/docs.

Authentication

API key as x-api-key header, generated in your dashboard. Rate-limited per key (100 req/min default, custom tiers available).

Webhooks

HMAC-SHA256 signed with your per-endpoint secret. Verify by computing hmacSign(body, secret) and comparing constant-time to x-adnet-signature.

Postback URL

POST https://trk.adnet.example/postback?click_id={click_id}&idfa={idfa}&install_time={iso}

Pass the MMP's HMAC in mmp_signature. We validate against the per-campaign shared secret.