# Actoki

> Actoki is a practical API platform for maps, verification, travel, business data, documents, monitoring and developer utilities. It uses REST-style HTTP endpoints, JSON payloads, server-side API-key authentication and account-level usage controls.

## Primary pages

- [Homepage](https://actoki.com/): Product overview, API categories, protected maps, security and FAQs.
- [Developer documentation](https://actoki.com/docs): Quick start, authentication, errors, rate limits, maps, security, production checklist and complete installed endpoint reference.
- [OpenAPI specification](https://actoki.com/openapi.json): Machine-readable OpenAPI 3.1 discovery document generated from installed service manifests.
- [Support](https://actoki.com/support): Product, onboarding and implementation support.
- [Developer registration](https://actoki.com/register): Create an account and obtain managed API access.

## Integration principles

- Keep permanent API keys on a trusted server or in a managed secret store.
- Do not expose reusable account secrets in browser JavaScript, public repositories, screenshots or support messages.
- For browser maps, use short-lived tokens or protected embeds with exact origin restrictions and narrow permissions.
- Use explicit connect and total timeouts, bounded retries with jitter, and respect Retry-After for rate-limited requests.
- Send only data required by the selected endpoint and do not log secrets or unnecessary personal data.
- Complete the production checklist before customer traffic is enabled.
- Treat endpoints labelled Preview as integration contracts only until their provider or worker is configured. Preview requests return HTTP 503 before usage is recorded or credits are consumed.

## Important API areas

- Maps and location: protected map tokens, styles, regions, plotting, embeds, geocoding and geographic utilities.
- Verification and trust: email, domain, phone, identity, risk and data-quality checks.
- Travel: airport, country, timezone, currency, weather and travel-rule utilities.
- Documents and data: extraction, transformation, PDF, spreadsheet and structured-data tools.
- Security and operations: domain health, security headers, monitoring, alerts, privacy and compliance utilities.
- Developer and business utilities: text, content, finance, marketing, accessibility, design and workflow APIs.

## Source of truth

The human-readable documentation and generated OpenAPI specification are the source of truth for installed service availability and maturity. Account permissions, pricing units and operational allowances can vary by configuration.