Waveform Apps Developer API

The Waveform Apps API is a small public JSON API for reading what we build, what it costs and what we have shipped, and for sending us a message. It exists so AI agents and integrations can act for a user without scraping the site.

• Base URL: https://www.waveformapps.com/api
• Specification: /openapi.json (OpenAPI 3.1 with operationIds and typed request and response schemas)
• Agent guide: /llms.txt
• Machine-readable documents: /pricing.md, /llms-full.txt, /.well-known/ard.json (also at /.well-known/ai-catalog.json), /sitemap.xml and /.well-known/security.txt
• Markdown pages: every page returns Markdown when requested with Accept: text/markdown, or by appending .md to the page URL (for example https://www.waveformapps.com/about.md).
• Cross-origin: every response carries Access-Control-Allow-Origin: *, so browser-based callers can read the API from any origin. OPTIONS preflights are free and never use up rate limit.
• HEAD: GET endpoints answer HEAD with the same status and headers and no body, so you can check availability without downloading anything.
• Caching: the catalog GETs carry an ETag and Cache-Control: public, max-age=300. Send the ETag back in If-None-Match; a match answers 304 with no body. The machine documents this site serves itself (/openapi.json, /.well-known/ard.json, /pricing.md) revalidate the same way.

10 requests per 60 seconds per client IP address (IPv6: per /64 prefix) across all /api/ endpoints, using the IETF RateLimit header fields draft. Every API response carries the policy; a 429 response also carries the remaining quota and a Retry-After value in seconds.

RateLimit-Policy: "api";q=10;w=60

HTTP/1.1 429 Too Many Requests
RateLimit-Policy: "api";q=10;w=60
RateLimit: "api";r=0;t=60
Retry-After: 60

Errors use RFC 9457 problem details with the content type application/problem+json. Every error has type, title, status, detail, a stable code, and a hint that says how to recover. Validation errors add an errors array of field and message pairs.

{
  "type": "https://www.waveformapps.com/api-docs#errors",
  "title": "Bad Request",
  "status": 400,
  "detail": "One or more fields are invalid.",
  "code": "validation_failed",
  "hint": "Fix the fields listed in `errors` and resend.",
  "errors": [
    {
      "field": "email",
      "message": "Valid email is required"
    }
  ]
}

• not_found: No endpoint at that path (404).
• method_not_allowed: Wrong HTTP method; the Allow header lists the supported ones (405).
• unsupported_media_type: The POST body was not sent as application/json (415).
• payload_too_large: The POST body is over 16 KiB (413).
• invalid_json: The POST body could not be parsed as JSON (400).
• validation_failed: A field is missing or invalid; errors lists each field (400).
• rate_limited: Over the rate limit; wait Retry-After seconds and retry (429).
• email_unavailable: Email delivery failed; retry later or email hello@waveformapps.com (503).
• internal_error: The server hit an unexpected fault; retry, and report it if it keeps failing (500).

curl https://www.waveformapps.com/api/services
curl https://www.waveformapps.com/api/pricing
curl https://www.waveformapps.com/api/work
curl https://www.waveformapps.com/api/faq
curl https://www.waveformapps.com/api/process

curl -X POST https://www.waveformapps.com/api/contact \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Ada Lovelace",
    "email": "ada@example.com",
    "message": "We need a booking website for a two-location clinic."
  }'

curl -H "Accept: text/markdown" https://www.waveformapps.com/about
curl https://www.waveformapps.com/about.md