Skip to main content

Authentication

TurboAds API keys are workspace-scoped bearer tokens. Create a key in Settings > Developers, then send it in the Authorization header:
Only workspace owners can create or revoke keys. TurboAds stores only a SHA-256 hash of each key, and the full secret is shown once when created. Revoked keys stop working immediately and return 401 unauthorized.

Base URL

All v1 endpoints are rooted under /v1.

Discovery endpoints

Use these endpoints to find IDs before creating generation jobs:

File uploads

Use file uploads when a generation needs an image or video reference.
Then pass the returned file upload ID into a generation request, such as reference_file_ids, start_frame_file_id, end_frame_file_id, image_file_id, or video_file_id. Images can be up to 10MB. Videos uploaded from URL can be up to 50MB. Direct multipart uploads are limited to 20MB by Convex HTTP action limits. Accepted MIME types:

Rate limits

Rate limits are applied per API key. When a key exceeds its limit, TurboAds returns 429 rate_limited with retry_after_ms.

Errors

TurboAds returns JSON errors with a stable shape:
Common status codes:

Examples

List projects

Generate an image

Upload a reference file

Upload from URL

Poll and fetch the final URL