Developer API

curl -sS "https://app.curobi.com/api/admin/v1/subscriptions?status=ACTIVE&limit=100" \
  -H "Authorization: Bearer $CUROBI_API_KEY"

// Portable fetch — Deno, Bun, Cloudflare Workers, any edge runtime.
const url = new URL("https://app.curobi.com/api/admin/v1/subscriptions");
url.searchParams.set("status", "ACTIVE");
url.searchParams.set("limit", "100");
 
const res = await fetch(url, {
  headers: { Authorization: `Bearer ${CUROBI_API_KEY}` },
});
 
if (!res.ok) {
  const { error } = await res.json();
  throw new Error(`${error.code}: ${error.message} (${error.request_id})`);
}
 
const { data, next_cursor } = await res.json();

// Node 18+, no dependencies. Every other Node example on these pages uses this.
const BASE = "https://app.curobi.com/api/admin/v1";
 
export async function curobi(path, { params = {}, ...init } = {}) {
  const url = new URL(BASE + path);
  for (const [key, value] of Object.entries(params)) {
    // Skip nullish values so an unset cursor just omits the parameter.
    if (value != null) url.searchParams.set(key, String(value));
  }
 
  const res = await fetch(url, {
    ...init,
    headers: {
      Authorization: `Bearer ${process.env.CUROBI_API_KEY}`,
      Accept: "application/json",
      ...(init.body ? { "Content-Type": "application/json" } : {}),
      ...init.headers,
    },
  });
 
  const body = await res.json();
 
  if (!res.ok) {
    // Branch on `code`, never on `message` — see /api/errors.
    const { code, message, request_id } = body.error;
    throw Object.assign(new Error(`${code}: ${message}`), {
      code,
      requestId: request_id,
      status: res.status,
    });
  }
 
  return body;
}

import { curobi } from "./curobi.js";
 
const { data } = await curobi("/subscriptions", {
  params: { status: "ACTIVE", limit: 100 },
});
 
console.log(data.length);

import os
import requests
 
BASE = "https://app.curobi.com/api/admin/v1"
 
session = requests.Session()
session.headers["Authorization"] = f"Bearer {os.environ['CUROBI_API_KEY']}"
session.headers["Accept"] = "application/json"
 
res = session.get(f"{BASE}/subscriptions", params={"status": "ACTIVE", "limit": 100})
 
if not res.ok:
    err = res.json()["error"]
    raise RuntimeError(f"{err['code']}: {err['message']} ({err['request_id']})")
 
body = res.json()
print(len(body["data"]), body["next_cursor"])

require "json"
require "net/http"
require "uri"
 
BASE = "https://app.curobi.com/api/admin/v1"
 
uri = URI("#{BASE}/subscriptions")
uri.query = URI.encode_www_form(status: "ACTIVE", limit: 100)
 
req = Net::HTTP::Get.new(uri)
req["Authorization"] = "Bearer #{ENV.fetch('CUROBI_API_KEY')}"
req["Accept"] = "application/json"
 
res  = Net::HTTP.start(uri.host, uri.port, use_ssl: true) { |http| http.request(req) }
body = JSON.parse(res.body)
 
unless res.is_a?(Net::HTTPSuccess)
  err = body["error"]
  raise "#{err['code']}: #{err['message']} (#{err['request_id']})"
end
 
puts body["data"].length

// React Router v7, framework mode. The loader runs on the server, which is the
// only place the secret key may ever exist — see the warning below.
import type { Route } from "./+types/subscriptions";
 
export async function loader() {
  const url = new URL("https://app.curobi.com/api/admin/v1/subscriptions");
  url.searchParams.set("status", "ACTIVE");
  url.searchParams.set("limit", "100");
 
  const res = await fetch(url, {
    headers: { Authorization: `Bearer ${process.env.CUROBI_API_KEY}` },
  });
 
  if (!res.ok) {
    const { error } = await res.json();
    throw new Response(error.message, { status: res.status });
  }
 
  const { data } = await res.json();
  return { subscriptions: data };
}
 
export default function Subscriptions({ loaderData }: Route.ComponentProps) {
  return <p>{loaderData.subscriptions.length} active subscriptions</p>;
}