The Loom API is a managed HTTPS service. All routes are versioned under /v1:
https://api.loom.getmetacognition.com/v1/...

Authentication

Every request authenticates with a bearer credential that resolves to a workspace (org_id). Per-user operations also need a user_id.
1

API key

Authorization: Bearer <key> — create keys in the dashboard. Add X-User-Id for per-user operations. Best for servers and agents.
2

Session token (JWT)

Authorization: Bearer <token> from signup/login. Claims carry user_id, org_id, name, email. Best for interactive apps.
See Authentication for the full guide.
Founder-only endpoints (everything under /v1/admin/* except /admin/me) require an account with founder access, else 403.

Endpoint map

GroupEndpoints
AuthPOST /auth/signup, POST /auth/login, GET /auth/me
MemoryPOST /recall, papers (recall/exists/ingest/batch/fetch), analysis
Sessions & graphPOST /sessions/link, GET /graph, neighborhood, materialize
IngestionGET /ingest/formats, POST /ingest
Account & billingaccount, api-keys, billing checkout, usage/billing/analytics
Users & workspacesusers, workspaces, per-user memory
Insightscross-session, directions
Exportexport/session, export, export/download
Adminoverview, workspaces, users, health, set-plan, add-user, activity
Health/, health, status, admin/me
49 endpoints in total. Paths below are shown without the /v1 prefix for brevity.