Krows API: quickstart

Chapter 1Overview

The Krows API is a REST API, in English, with JSON responses, modelled on Stripe’s. With it you create checkout sessions from your server, read your round, investments, milestones and rewards, and query events. Webhooks tell you what happens without polling.

Chapter 2The keys

app.krows.app/proyectos/gueepard/integrar

123

1. Go to your startup › Integration › API for your appOr dashboard › API and webhooks.
2. Tap “Create secret key”Copy it and keep it safe (environment variable). For security you will not see it again: if you lose it, roll it.
3. Rolling invalidates it instantly. Do it if it leaks.

Chapter 3Your first call

Read your round. With sk_test everything happens in test mode.

curl https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/round \
  -H "Authorization: Bearer $KROWS_SECRET_KEY"

const res = await fetch('https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/round', {
  headers: { Authorization: `Bearer ${process.env.KROWS_SECRET_KEY}` },
});
const round = await res.json();
console.log(round.raised, round.goal, round.status);

import os, requests

r = requests.get("https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/round",
                 headers={"Authorization": f"Bearer {os.environ['KROWS_SECRET_KEY']}"})
round = r.json()
print(round["raised"], round["goal"], round["status"])

{
  "object": "round",
  "mode": "live",
  "startup": { "name": "Aurora Solar", "slug": "aurora-solar" },
  "status": "open",
  "goal": 120000,
  "raised": 46800,
  "currency": "USDC",
  "percent_raised": 39,
  "investors": 90,
  "tokens": 120000,
  "token_price": 1,
  "start": "2026-10-03T00:00:00.000Z",
  "end": "2027-01-15T00:00:00.000Z",
  "contract": "9fQk…",
  "network": "mainnet"
}

The first successful call marks the “API” integration as detected in Integration, in the key’s mode.

Chapter 4Pagination, idempotency and errors

Pagination

Lists return {"object": "list", "data": [...], "has_more": true|false}. Use limit (1–100, default 20) and starting_after with the last item’s id.

curl "https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/investments?limit=20" \
  -H "Authorization: Bearer $KROWS_SECRET_KEY"

# Next page: pass the id of the last item
curl "https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/investments?limit=20&starting_after=inv_…" \
  -H "Authorization: Bearer $KROWS_SECRET_KEY"

{
  "object": "list",
  "data": [ { "object": "investment", "id": "inv_…", … } ],
  "has_more": true
}

Idempotency

When creating a session, send Idempotency-Key. If you retry after a network failure, you get the same session instead of a new one.

Errors

Standard HTTP codes and a body like this:

{
  "error": {
    "type": "invalid_request_error",
    "code": "amount_invalid",
    "message": "amount must be a USDC number, at least 1, with up to 2 decimals."
  }
}

Chapter 5Log and Workbench

In API and webhooks, the “Log” tab shows every API call (method, path, status, time, query, body and response; never the headers, where the key travels) and every webhook delivery, with “Resend”. They are kept for 30 days. The Workbench (W key or “Developers” in the bottom bar) brings together events, logs and integration health; you can hide it in Settings › Developers, where you also choose the API version and the code sample language.

app.krows.app/ajustes/desarrolladores

Chapter 6Final review

Before you close this guide, check you have it clear. None of this is sent anywhere: it is just for you.