Bolrach Developer Platform

One API for the whole Bolrach platform.

Versioned, metered, key-scoped access to the services Bolrach runs in production: self-hosted IP geolocation, bots, WhatsApp, streaming, ERP, voice, identity and the wiki, all on one gateway with one key and one error envelope.

Read the Geo API docs Get an API key

Thirty seconds to first call

Every request carries your key as a bearer token. Base URL https://api.bolrach.com, JSON in and out, one stable error envelope everywhere.

curl "https://api.bolrach.com/v1/geo?ip=8.8.8.8" \
  -H "Authorization: Bearer bk_live_your_key_here"

{
  "ip": "8.8.8.8",
  "country": "US",
  "region": "California",
  "city": "Mountain View",
  "lat": 37.422,
  "lon": -122.085,
  "attribution": "IP geolocation by DB-IP (https://db-ip.com) and ip-location-db"
}

Services

Each service is powered by an engine already serving Bolrach's own products, exposed through the gateway with its own scope.

Geo

Live

IP geolocation on Bolrach-owned datasets. Country, region, city and coordinates, single or batch.

GET /v1/geo

Bots

Live

Bot templates, the public directory, and real web-chat with live bots on the Bolrach Bot engine.

POST /v1/bots/{id}/chat

Chat

Live

Tenant-keyed channels, members and messages. Realtime over Centrifugo (and SSE). Files attach as Drive ids.

GET /chat/v1/channels

Live

Send text and template messages through the platform's business number on the Meta Cloud API.

POST /v1/whatsapp/send

Keys

Live

One key store for every module: permissions per module, bindings, expiry, rotation and revocation from bolrach.com/account/keys.

Authorization: Bearer bk_live_…

Send

Live

Transactional and campaign email from your own domains: one key, one POST, delivered from Bolrach IPs with your DKIM.

Streaming

Live

Channels, videos, shorts, live streams and search from the Akewe streaming catalogue.

GET /v1/streaming/live

ERP

Live

Scoped reads from the DGUMS engine, starting with the corporate registry of legal entities.

GET /v1/erp/companies

Calling

Live

Internet calls to a verified business: caller policy, one queue, callbacks and signed webhooks.

GET /v1/orgs/{org}/calls

Identity

Live

Stateless face verification with passive liveness on the self-hosted Authvio engine.

POST /v1/identity/face-match

Trust & Data

Live

Grade a URL for threats with the in-house Trustiry engine. Partner-scoped.

POST /v1/trust/check-url

Wiki

Live

Evidence-first articles, claims and source snapshots. Public read; wiki:write for authors.

GET /v1/wiki/articles

Drive

Live

Tenant-keyed uploads and Range playback. Signed-in app at bolrach.com/drive. Chat attachments use drive_file_id.

POST /drive/v1/files/initiate

Files

Live

Secure signed uploads with malware scan gate. Public health; files:write / files:read for products.

POST /v1/files/uploads

Keys

Live

One key store for every module: permissions per module, bindings, expiry, rotation and revocation from bolrach.com/account/keys.

Authorization: Bearer bk_live_…

Send

Live

Transactional email, newsletters and campaigns from your own verified domain. Four streams, consent-gated audiences, signed webhooks.

POST /send/v1/messages

Push

Live

Push to browsers, Android, iPhone, Huawei and Amazon Fire from one API, with device receipts and signed webhooks. Each platform has a quickstart.

POST /push/v1/messages

Help

Live

Tickets, conversations and public intake behind Bolrach Help. Authvio agents and the estate bridge.

GET /api/tickets

How keys work

Request a key

Keys are issued by the Bolrach platform team while the self-serve console is being built. Each key is shown once and stored only as a hash.

Scopes decide access

A key carries explicit scopes like geo:read. A call outside your scopes returns 403 missing_scope, and fintech APIs live on a separate platform entirely.

Fair, visible limits

Plans set your per-minute rate and daily quota. Every response carries X-RateLimit-* headers so you always know where you stand.