Skip to main content
The Moda REST API provides direct HTTP access to your canvases, designs, brand kits, and AI design capabilities. Use it to build integrations, automate workflows, or embed Moda functionality in your own applications.

Base URL

All API requests use the following base URL:

Authentication

Authenticate by including an API key as a Bearer token in the Authorization header. Generate API keys from Settings > Developer > REST API in the Moda app.
See Authentication for details on creating keys, available scopes, and security best practices.

Pin an API version

Add a Moda-Version header to every request so your integration’s response shapes stay stable across our releases:
Omitting the header resolves to the current default, which advances on each sunset date. Pinning keeps your client on a known shape until you explicitly upgrade. See Versioning for supported versions and the migration map.

Quick example

List your canvases with a single curl command:
Response:
Pass next_cursor back as ?cursor= to fetch the next page; iterate until next_cursor is null.

What you can do

Rate limiting

The API allows 120 requests per minute per API key. Your organization also has a cap on concurrent design tasks (3 on free, 10 on paid, 15 on ultra). Exceeding either limit returns 429 Too Many Requests with a Retry-After header. See Usage Limits for full details and how to request a higher cap.

Error format

Every error response carries a single structured envelope nested under an error key:

Fields

Status codes

Client guidance

  • Branch on type, not status code alone. Status codes collapse distinct failure modes together; type separates rate_limited from idempotency_conflict even though both are 409-adjacent.
  • Log request_id on every error. It is present on every response (success and failure) both in the body and in the X-Request-ID header. Pass it to support if you need help diagnosing a specific call.
  • Retry on upstream_error and rate_limited. Everything else is either permanent or requires you to fix the request.
  • Do not parse message. It can change without notice. Use type and code for branching, message only for display.

Use Moda docs in your AI editor

Give your AI agent direct access to these docs while building with the API. The docs are exposed as a hosted MCP server at https://docs.moda.app/mcp — your agent gets a search tool and a read-only filesystem over every page, no local install required.
Agents that support agent-skill auto-discovery will also pick up the moda-api skill from https://docs.moda.app/.well-known/agent-skills/ — covering the canonical Task envelope, Moda-Version pinning, prefixed IDs, the typed error envelope, idempotency_key, cursor pagination, and webhook HMAC verification. You can also access the docs as plain text for any LLM:

Next steps

  • Authentication — Create and manage API keys
  • Versioning — Pin a version with the Moda-Version header
  • Webhooks — Receive notifications when tasks complete