API Usage Agreement

1. API Access

Access to the WaitingTheLongest.com API ("API") is granted upon registration as a Shelter Partner and issuance of an API key. API access is:

• Non-exclusive and non-transferable
• Subject to these terms and the general Terms of Service
• Revocable at any time for violation of these terms
• Provided free of charge for the Free tier

2. Acceptable Use

The API may be used for:

• Managing your own shelter's dog listings (create, read, update, delete)
• Integrating WTL data with your own shelter management software
• Building internal tools and dashboards for your organization
• Receiving webhook notifications about your dogs
• Generating reports and analytics about your shelter's performance
• Automated data sync between your systems and WTL

3. Prohibited Use

The following uses are strictly prohibited:

• Scraping: Accessing or scraping other shelters' data, whether through the API or any other means.
• Competitive Use: Using API data to build competing platforms or services without explicit written permission.
• Rate Limit Circumvention: Attempting to bypass rate limits through multiple keys, distributed requests, or other techniques.
• Key Sharing: Sharing API keys with unauthorized third parties. Each integration must use its own key.
• Fake Listings: Using the API to create fraudulent, misleading, or spam dog listings.
• Automated Attacks: Using the API for denial-of-service attacks, vulnerability scanning, or other security testing without prior written authorization.
• Data Resale: Selling or redistributing data obtained through the API.

4. Rate Limits

API usage is subject to rate limits based on your partner tier:

When rate limits are exceeded, the API returns HTTP 429 (Too Many Requests) with a Retry-After header indicating when the next request may be made. Rate limit headers (X-RateLimit-Limit, X-RateLimit-Remaining,X-RateLimit-Reset) are included in every response.

5. Availability

• The API is provided on a best-effort basis for the Free tier.
• No guaranteed SLA for Free tier users. Basic and Premium tiers may include SLA commitments as specified in their service agreement.
• Scheduled maintenance windows will be announced at least 48 hours in advance via email to registered API key holders.
• Emergency maintenance may occur without notice but will be communicated as soon as possible.

6. API Versioning

• The current API version is v1, accessible at /api/v1/*.
• Deprecated API versions will be supported for a minimum of 12 months after deprecation notice.
• Migration guides will be provided when new versions are released.
• Breaking changes will only be introduced in new major versions.
• Non-breaking additions (new fields, new endpoints) may be added to the current version at any time.

7. Data Format

• All API responses use JSON format with UTF-8 encoding.
• Dates follow ISO 8601 format (e.g., 2026-03-20T12:00:00Z).
• IDs use UUID v4 format.
• Pagination follows cursor-based or offset-based patterns as documented per endpoint.
• Error responses include a consistent structure: { "error": "message", "code": "ERROR_CODE" }

8. Authentication

• All API requests require authentication via an API key passed in the Authorization: Bearer wtl_sk_... header.
• HTTPS is mandatory. HTTP requests will be rejected.
• API keys must be stored securely and never exposed in client-side code, public repositories, or browser-accessible locations.
• If a key is compromised, rotate it immediately via the dashboard or API.
• Keys can be scoped with specific permissions (read, write, delete, webhook_manage, bulk_import).

9. Liability

• WTL is not liable for data loss resulting from API misuse, including but not limited to: unintended bulk deletions, malformed update requests, or integration bugs.
• Shelter Partners are responsible for maintaining their own backups of critical data.
• WTL provides no warranty regarding API availability, accuracy, or fitness for any particular purpose beyond what is specified in the applicable service tier agreement.

10. Termination

• API access may be revoked immediately for violations of this agreement or the Terms of Service.
• For non-violation revocation (e.g., account closure), 30 days notice will be provided.
• Upon termination, all API keys will be deactivated and outstanding webhook deliveries will cease.
• API request logs will be retained for 90 days post-termination for security audit purposes.

11. Contact

For API support, technical questions, or to report issues: api@waitingthelongest.com