Skip to main content
Attend runs registration, check-in, travel and safeguarding for Hack Club events. This API is what the Attend mobile app talks to, and what trusted server-to-server integrations use.

Base URL

Authentication

Almost every endpoint takes a bearer token:
There are four kinds, and which one you hold decides what you can reach: The API reference tab notes which tokens each endpoint accepts, and which scopes apply.

Getting a token

Mobile tokens come from POST /session. Series and event keys are issued from the Attend dashboard by someone who owns the series or administers the event. Global API tokens are issued by a superadmin.

Rate limits and errors

Errors are JSON, with an error key describing what went wrong. A 401 means the token is missing, expired or revoked; a 403 means the token is valid but its scope or event doesn’t cover the request.