> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usecontra.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Management API Overview

> Account, workflow, webhook, and billing administration — everything an enterprise tenant needs to manage their Contra integration.

The Contra Management API lets you do everything the dashboard does — **programmatically** — across nine categories.

<CardGroup cols={3}>
  <Card title="Auth API" icon="key" href="/api-reference/auth-api/register-account">
    Self-serve account creation · email verification · login · application keys.
  </Card>

  <Card title="Workflows" icon="diagram-project" href="/api-reference/workflows/list">
    The 5 built-in verification recipes plus your custom workflows.
  </Card>

  <Card title="Sessions" icon="timer" href="/api-reference/sessions/create">
    One verification run per user. Idempotent on `vendor_data`.
  </Card>

  <Card title="Compliance Lookup" icon="shield-check" href="/api-reference/compliance/check">
    Free on-chain read · "is this agent verified?"
  </Card>

  <Card title="Identity & Documents" icon="id-card" href="/api-reference/identity/id-verification">
    Standalone primitives — ID verification, PoA, AML, face match.
  </Card>

  <Card title="Webhook Destinations" icon="link" href="/api-reference/webhooks/list">
    Multi-destination webhook config with HMAC signing.
  </Card>

  <Card title="Billing" icon="credit-card" href="/api-reference/billing/balance">
    Credit balance + Stripe-powered top-up.
  </Card>

  <Card title="KYC Catalog" icon="list" href="/api-reference/kyc/catalog">
    Country × document-type matrix (free).
  </Card>

  <Card title="Errors & rate limits" icon="triangle-exclamation" href="/api-reference/errors">
    Status codes, retry semantics, 429 handling.
  </Card>
</CardGroup>

## Base URLs

| Surface                                      | Host                         |
| -------------------------------------------- | ---------------------------- |
| **Identity API** (verification + management) | `https://identity.contra.id` |
| **Auth API** (account + applications)        | `https://auth.contra.id`     |

## Authentication summary

| Surface                              | Header                                 |
| ------------------------------------ | -------------------------------------- |
| Register / Verify Email / Login      | *(unauthenticated)*                    |
| Get Credentials / Create Application | `Authorization: Bearer <access_token>` |
| Everything else (`/v1/*`)            | `x-api-key: <api_key>`                 |

See [Authentication](/api-reference/authentication) for the full picture.

## Rate limits

| Endpoint family          | Limit                  |
| ------------------------ | ---------------------- |
| Auth API                 | 5 register / IP / hour |
| Workflows / Sessions     | 300 req / min          |
| Session creation         | 600 req / min          |
| Compliance Lookup (free) | 1000 req / min         |
| Webhook Destinations     | 60 req / min           |

429s return a `Retry-After` header — back off exponentially.