## API Server

<br>

**HTTPS only**
<br>
<br>

The API only responds to requests sent securely using HTTPS.

Clients must validate SSL/TLS certificates (including the certificate chain and hostname) to ensure they are communicating with Testpad. Failure to properly validate the certificate exposes your integration to man-in-the-middle attacks, where malicious actors could intercept, modify, or steal your data.

<br>

**Domain**
<br>
<br>

Find the API Server at `https://api.testpad.com`.

Note the subdomain is `api` and not your account ID.

<br>

**Paths**
<br>
<br>

All API endpoints are hosted on paths that begin with the common prefix `/api/v1/`.

At some point in the future, if backwards incompatible changes are introduced, these will be introduced at a new version number, e.g. `/api/v2/`.

However, in general, every attempt will be made to keep changes and new features backwards compatible, and while this holds true, the API will continue to be hosted at `/api/v1/`.