API access

The bananabay API exposes the same account-owned product workflows that the app uses for food inventory, meal plans, schedules, tasks, settings, privacy controls, and related records.

The API is beta. Use it for personal scripts and controlled integrations you can repair. Do not use it for emergency, safety-critical, medical, legal, financial, or irreversible workflows.

Base URL

Use the API domain as the API origin:

https://api.bananabay.xyz

API paths start with /api, for example:

https://api.bananabay.xyz/api/food

Do not use https://bananabay.xyz as the API origin. The product website does not expose /api/*; use the website root for website uptime and the API domain for API uptime.

Get an API key

API keys are account credentials. Treat them like passwords.

1. Sign in to bananabay.
2. Open the signed-in user menu.
3. Open account management.
4. Open API Keys.
5. Create a key and store the secret somewhere private.
6. Revoke keys you lose, stop using, or no longer recognize.

API keys begin with ak_. If API Keys is not visible in account management, API access is not enabled for that account yet.

Authenticate requests

Send the key as a bearer token:

curl https://api.bananabay.xyz/api/food \
  -H "Accept: application/json" \
  -H "Authorization: Bearer $BANANABAY_API_KEY"

Do not put API keys in browser code, public repositories, docs, screenshots, analytics events, or shared logs.

Request format

For JSON writes, send Content-Type: application/json:

curl https://api.bananabay.xyz/api/tasks \
  -X POST \
  -H "Accept: application/json" \
  -H "Authorization: Bearer $BANANABAY_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{"title":"Review freezer inventory"}'

Route parameters use colon names in this documentation. Replace them with real IDs from earlier responses:

/api/tasks/:taskId
/api/tasks/task_123

Public route

GET /api/ping is a public ping route and does not require an API key:

curl https://api.bananabay.xyz/api/ping

The product website does not answer this route. bananabay.xyz/api/* is intentionally absent.

Account scope

Authenticated API requests act as your bananabay account. They can read, create, update, or delete records that belong to that account depending on the endpoint.

Use API reference for the current route map.