API Developer Docs

Authentication

Create a key in Settings → API (Pro/Ultra). Send it as a Bearer token on every request over HTTPS. Treat it like a password — it's shown only once.

Base URL: https://supwriter.com/api/v1

Quickstart

const res = await fetch("https://supwriter.com/api/v1/humanize", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.SUPWRITER_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ text: "Your text here." }),
});

const { success, data, error } = await res.json();
if (!success) throw new Error(error.code);
console.log(data.humanized_text);

What you can do with the API

Four endpoints, one key. Every call consumes word credits from your plan — here's the cost of each.

Plans & limits

The developer REST API is available on the Pro and Ultra plans. MCP connects on every plan — Pro and Ultra additionally unlock REST API keys and static-token (headless) MCP.

Build it with your AI agent

Copy one prompt — your agent reads the full skill.md spec and builds all four tools.

Target stack: Next.js.

Integrate the SupWriter text API into my app.

Read the full spec and follow it exactly: https://supwriter.com/skill.md
It documents authentication (a server-side "Authorization: Bearer sw_live_…" key), the base URL https://supwriter.com/api/v1, and four POST endpoints — /humanize, /paraphrase, /grammar, /detect — each returning { "success": true, "data": {…} }, plus the error codes, rate limits (Pro 60 / Ultra 120 requests per minute), and per-word credit billing.

Build a typed client for all four tools that:
- reads the API key from a server-side env var, never the browser (HTTPS only),
- unwraps "data", maps "error.code" to typed errors, and retries 429s honoring Retry-After,
- then add a small UI to humanize, paraphrase, grammar-check, and AI-detect text.

Use my existing stack and conventions, and keep the key server-side only.

Endpoints

{
  "text": "Your AI-generated text here.",   // required
  "intensity": "medium",                      // optional: low | medium | high
  "format": "plain",                          // optional: plain | markdown
  "language": "english",                      // optional
  "tone": "general",                          // optional
  "purpose": "general"                        // optional
}

{
  "success": true,
  "data": {
    "humanized_text": "The humanized output.",
    "word_count": 42,
    "credits_used": 42,
    "credits_remaining": 14958,
    "processing_time_ms": 8120
  }
}

{
  "text": "Text to paraphrase.",   // required
  "mode": "standard",               // optional: standard | formal | casual | academic | creative
  "language": "english"             // optional
}

{
  "success": true,
  "data": {
    "paraphrased_text": "The paraphrased output.",
    "word_count": 40,
    "credits_used": 40,
    "processing_time_ms": 7600
  }
}

{
  "text": "Text too correct.",   // required
  "mode": "basic",                // optional: basic | thorough | style
  "language": "english"           // optional
}

{
  "success": true,
  "data": {
    "corrected_text": "Text to correct.",
    "word_count": 3,
    "credits_used": 3,
    "processing_time_ms": 5400
  }
}

{
  "text": "Text to analyze."   // required
}

{
  "success": true,
  "data": {
    "detection_score": 12,
    "detectors": { "turnitin": "right", "gptzero": "right", "...": "..." },
    "sentences": [{ "sentence": "...", "score": 5, "classification": "HUMAN_ONLY" }],
    "word_count": 120,
    "credits_used": 120,
    "credits_remaining": 14880,
    "processing_time_ms": 3100
  }
}

Errors

Errors use the envelope { "success": false, "error": { "code", "message" } } with a matching HTTP status.

Rate limits & usage

• Rate limit: Pro 60 / Ultra 120 requests per minute, per key. Over the limit returns 429 rate_limited.
• Every response carries X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset; a 429 also sends Retry-After.
• Per-request word caps: Pro 1,500 words, Ultra 3,000 words.
• Every call consumes your plan's word credits — including AI detection, which the API meters (it's free only in the web app).
• Track requests over time in Settings → API — a 30-day usage chart broken down by tool.

Using your key with MCP

The SupWriter MCP server normally uses OAuth, but it also accepts an API key — useful for dev tools (Cursor, Claude Code, the CLI). Configure the connector with an Authorization: Bearer sw_live_… header to skip the browser sign-in.

Key safety

• Store keys server-side (a secret manager / environment variable) — never in client-side code or git.
• Use a separate key per app or environment so you can revoke one without breaking the others.
• If a key is exposed, revoke it in Settings → API and create a new one. Revocation is immediate for new requests.

FAQ