API
API overview
Reference for the RevenueHog HTTP APIs, covering the keyless SDK endpoints, the feedback API, paywall management, CSV export and server-to-server notifications.
RevenueHog exposes a small set of HTTP endpoints on https://revenuehog.dev. Each family has its own authentication model.
Endpoint families
| Family | Base path | Auth | Page |
|---|---|---|---|
| SDK ingestion | /api/sdk/v1/* | None, or App Attest device token | SDK API |
| Feedback ingest | /api/v1/feedback | API key | Feedback API |
| API key management | /api/settings/api-keys | Session | API keys |
| SDK device revocation | /api/settings/sdk-devices | Session | SDK API |
| Paywall management | /api/mobile/paywall | Session | Paywall management |
| Revenue export | /api/export/revenue | Session | Export |
| Store notifications | /api/s2s/{apple,google,stripe}/{token} | Per-connection URL token plus signature | Server-to-server |
| MCP | /api/mcp | OAuth | MCP |
All endpoints
| Method | Path |
|---|---|
POST | /api/sdk/v1/attest/challenge |
POST | /api/sdk/v1/attest |
POST | /api/sdk/v1/identify |
POST | /api/sdk/v1/attribute |
POST | /api/sdk/v1/events |
POST | /api/sdk/v1/feedback |
POST | /api/sdk/v1/adservices |
POST | /api/sdk/v1/paywall |
POST | /api/sdk/v1/paywall/impression |
POST | /api/v1/feedback |
GET, POST, DELETE | /api/settings/api-keys |
DELETE | /api/settings/sdk-devices |
GET, PUT | /api/mobile/paywall |
GET | /api/export/revenue |
POST | /api/s2s/apple/{token} |
POST | /api/s2s/google/{token} |
POST | /api/s2s/stripe/{token} |
Conventions
- Request and response bodies are JSON (
Content-Type: application/json), except the CSV export and the plain-text store notification acknowledgements. - Errors are
{ "error": "<message>" }with a 4xx status. See Errors. - SDK and feedback ingest responses send
cache-control: no-storeand permissive CORS. - The SDK API is versioned in the path (
/v1/). Fields may be added; existing fields keep their meaning within v1. - Limits are per minute. See Rate limits.
Related
Last updated on
In-app feedback
Send bug reports, ideas, questions and praise from your app to RevenueHog with the keyless SDK feedback endpoint, or from your servers with an API key.
Authentication
How RevenueHog authenticates API calls with App Attest device tokens, the unverified quarantine path, rh_ API keys, sessions and signed store notifications.