Velt REST APIs Best Practices
Comprehensive guide for Velt REST API v2, JWT authentication, and webhooks. Contains 10 rules across 4 categories covering core setup, REST API endpoints, webhook handling, and debugging.
When to Apply
Reference these guidelines when:
- Calling Velt REST API v2 endpoints from your backend
- Generating JWT tokens for frontend user authentication
- Handling Velt webhook events (comments, huddles, CRDT)
- Managing users, documents, organizations, or folders server-side
- Implementing GDPR data export or deletion
Rule Categories by Priority
| Priority | Category | Impact | Prefix |
|---|---|---|---|
| 1 | Core Setup | CRITICAL | core- |
| 2 | REST API | HIGH | rest- |
| 3 | Webhooks | MEDIUM | webhooks- |
| 4 | Debugging | LOW-MEDIUM | debug- |
Quick Reference
Core Setup (CRITICAL)
core-rest-api-auth— x-velt-api-key + x-velt-auth-token headers for all REST callscore-jwt-tokens— Generate JWT tokens for frontend auth, 48h expiry, refresh flow
REST API (HIGH)
rest-comments— Comment annotation + comment CRUD endpointsrest-users— Add/get/update/delete users, GDPR data operationsrest-documents-orgs— Document, organization, folder managementrest-notifications— Notification add/get/update/delete + configrest-activities-crdt— Activity logs + CRDT data endpointsrest-approval-engine— pointer (Approval Engine is now its own skill: seevelt-approval-engine-best-practices)
Webhooks (MEDIUM)
webhooks-basic— v1 setup, event types, payload format, securitywebhooks-advanced— v2/Svix enterprise webhooks, retries, transformations
Debugging (LOW-MEDIUM)
debug-common-issues— Troubleshooting backend integration issues
Compiled Documents
AGENTS.md— Compressed index of all rules with file paths (start here)AGENTS.full.md— Full verbose guide with all rules expanded inline