Bolrach Developer Platform

One API for the whole Bolrach platform.

Versioned, metered, key-scoped access to the services Bolrach runs in production: self-hosted IP geolocation, AI, bots, WhatsApp, streaming, ERP, voice and identity — wiki and the other live services on one gateway, one key, one error envelope.

Thirty seconds to first call

Every request carries your key as a bearer token. Base URL https://api.bolrach.io, JSON in and out, one stable error envelope everywhere.

curl "https://api.bolrach.io/v1/geo?ip=8.8.8.8" \
  -H "Authorization: Bearer bt_your_key_here"

{
  "ip": "8.8.8.8",
  "country": "US",
  "region": "California",
  "city": "Mountain View",
  "lat": 37.422,
  "lon": -122.085,
  "attribution": "IP geolocation by DB-IP (https://db-ip.com) and ip-location-db"
}

Services

Each service is powered by an engine already serving Bolrach's own products, exposed through the gateway with its own scope.

Geo

Live

IP geolocation on Bolrach-owned datasets. Country, region, city and coordinates, single or batch.

GET /v1/geo

AI

Live

Answer, summarize, classify and moderate on the shared AI engine's GPT-5 lanes.

POST /v1/ai/answer

Bots

Live

Bot templates, the public directory, and real web-chat with live bots on the bot.ng engine.

POST /v1/bots/{id}/chat

Chat

Live

Tenant-keyed channels, members and messages. Realtime over Centrifugo (and SSE). Files attach as Drive ids.

GET /chat/v1/channels

WhatsApp

Live

Send text and template messages through the platform's business number on the Meta Cloud API.

POST /v1/whatsapp/send

Streaming

Live

Channels, videos, shorts, live streams and search from the Akewe streaming catalogue.

GET /v1/streaming/live

ERP

Live

Scoped reads from the DGUMS engine, starting with the corporate registry of legal entities.

GET /v1/erp/companies

Voice

Live

Phone numbers, PBX health and permission-aware click-to-call on the cloud PBX.

POST /v1/voice/click-to-call

Identity

Live

Stateless face verification with passive liveness on the self-hosted Authvio engine.

POST /v1/identity/face-match

Trust & Data

Live

Grade a URL for threats with the in-house Trustiry engine. Partner-scoped.

POST /v1/trust/check-url

Wiki

Live

Evidence-first articles, claims and source snapshots. Public read; wiki:write for authors.

GET /v1/wiki/articles

Drive

Live

Tenant-keyed uploads and Range playback. Signed-in app at workspace.bolrach.io/drive. Chat attachments use drive_file_id.

POST /drive/v1/files/initiate

Files

Live

Secure signed uploads with malware scan gate. Public health; files:write / files:read for products.

POST /v1/files/uploads

Notify

Live

Shared notification events, in-app inbox, preferences and unread counts for products.

POST /v1/notify/events

Help

Live

Tickets, conversations and public intake on the Support.ng engine (api.bolrach.io = api.support.ng). Authvio agents + estate bridge.

GET /api/tickets

How keys work

1

Request a key

Keys are issued by the Bolrach platform team while the self-serve console is being built. Each key is shown once and stored only as a hash.

2

Scopes decide access

A key carries explicit scopes like geo:read. A call outside your scopes returns 403 missing_scope, and fintech APIs live on a separate platform entirely.

3

Fair, visible limits

Plans set your per-minute rate and daily quota. Every response carries X-RateLimit-* headers so you always know where you stand.