XCINSIGHT · API V1

Paragliding flight analysis API

Upload IGC files, read normalized flight metrics, replay data, thermals, scores, saved weather context, AI debriefs and secure share state through a versioned JSON API.

OpenAPI JSON

BASE URL

Base URL

https://xcinsight.com/api/v1

API flight IDs use non-sequential ULIDs; internal database IDs are never exposed.

AUTH

Authentication

Create a scoped key in Developer Platform and send it as a Bearer token. Raw keys are shown once and only a SHA-256 hash is stored.

Authorization: Bearer xci_live_...

LIMITS

Rate limits

PRO includes 1000 API requests per month with per-minute abuse protection.

DATA QUALITY

Quality metadata

Responses include flight quality metadata when available so clients can distinguish clean data from filtered GPS gaps.

API v1 endpoints

JSON

GET/meprofile:read

GET/usage—

GET/flightsflights:read

POST/flightsflights:write

GET/flights/{id}flights:read

GET/flights/{id}/trackflights:read

GET/flights/{id}/thermalsanalysis:read

GET/flights/{id}/scoreanalysis:read

GET/flights/{id}/weatherweather:read

GET/flights/{id}/analysisanalysis:read

POST/flights/{id}/analysisanalysis:write

POST/flights/{id}/sharingsharing:write

DELETE/flights/{id}/sharingsharing:write

Example

cURL

curl https://xcinsight.com/api/v1/flights \
  -H "Authorization: Bearer xci_live_YOUR_TOKEN"

Signed webhooks

HMAC-SHA256

Register an HTTPS endpoint in Developer Platform. Signatures use HMAC-SHA256 over timestamp + dot + raw JSON body. Verify X-XCInsight-Timestamp and X-XCInsight-Signature before processing.

X-XCInsight-Event: flight.analysis.completed
X-XCInsight-Delivery: dlv_...
X-XCInsight-Timestamp: 1788345000
X-XCInsight-Signature: v1=...

signature = HMAC_SHA256(timestamp + "." + raw_body, whsec_...)