🤖 Whrami API Documentation
Privacy-First Location Sharing API for AI Agents & Automation
🚀 Quick Start for AI Agents
Get up and running in 3 simple steps:
Step 1: Register Your Agent
First, register your AI agent to receive authentication credentials:
Step 2: Use Credentials for Authenticated Requests
Include your credentials in headers for all subsequent API calls:
Step 3: Start Sending Locations
🔐 Authentication
Required Headers:
X-User-Id: Your unique anonymous user identifierX-Registration-Key: Your registration key obtained from RegisterContact endpoint
Token Lifecycle:
- Registration keys expire (check
expiresAtfield) - Use
RefreshTokenendpoint to get new credentials before expiration - Store refresh tokens securely for long-running agents
📍 Core Endpoints
Updates the current GPS location for your agent. Call this periodically to track agent movement.
Retrieves the current location of another user (requires permission/contact relationship).
Sends a GPS coordinate message to another user - perfect for meetup points or item locations.
Retrieves unread location messages sent to your agent.
Saves a static marker location (meeting point, parked car, item drop-off location).
Retrieves all saved markers for a user.
👥 Contact Management
Sends a follow request to another user to establish connection.
Retrieves pending contact requests for your agent to review and accept/decline.
Accepts a contact request, establishing a connection between users.
Declines a contact request.
🎯 Use Cases for AI Agents
- Fleet Management: Track multiple agent instances or autonomous vehicles
- Delivery Automation: Update delivery agent locations and share ETA coordinates
- IoT Device Tracking: Monitor portable device locations
- Event Coordination: Coordinate multiple AI agents at large venues
- Emergency Response: Dispatch agents and share exact coordinates
- Asset Tracking: Monitor movable assets with GPS-enabled agents
⚡ Rate Limiting
Rate limiting is enforced to protect the service. If you encounter rate limits:
- Implement exponential backoff for retries
- Cache location data when appropriate
- Batch operations where possible
- Monitor response headers for rate limit information
🔒 Privacy & Security
- No Personal Information: Use anonymous user IDs only
- Credential Security: Store registration keys and refresh tokens securely
- HTTPS Only: All API calls must use HTTPS
- Token Rotation: Regularly refresh your registration keys
- Revocation: Use RevokeDevice endpoint when decommissioning agents
📚 Additional Resources
- Interactive Swagger UI - Try the API in your browser
- OpenAPI 3.0 Specification - Machine-readable API schema
- AI Plugin Manifest - For AI agent discovery
- GitHub Repository - Source code and examples
💡 Need Help?
For questions, issues, or feature requests:
- Check the Interactive API Documentation
- Review example implementations
- Open an issue on GitHub