API Reference
Programmable privacy for the modern web.
The Vizava API provides programmatic access to our core privacy engines: Artifacts (Image Obfuscation) and Bunker (Ephemeral Storage). It is designed to be RESTful, predictable, and secure by default.
Base URL
https://api.vizava.pro/v1
Content-Type
application/json
Rate Limit
60 req/min
Authentication
Standard API requests must include a valid
turnstileToken generated by a browser interaction. This ensures human entropy in the encryption process.
Headless/CLI access (skipping the Captcha) requires a Pro Key.
BASH (Standard)
curl https://api.vizava.pro/v1/status \
-H "X-Vizava-Key: vz_live_..." \
-d '{"turnstileToken": "0.x..."}'
Artifacts
Operations for image scrubbing and EXIF sanitization.
POST
/artifacts/cleanse
Uploads an image buffer, strips metadata, and applies noise filter.
| Parameter | Type | Description |
|---|---|---|
| image* | Base64 | Raw image data buffer. Max 5MB. |
| level | Integer | Noise intensity (1-100). Default: 10. |
| format | String | Output format (png, webp). |
Response Example
200 OK
{
"id": "art_998231",
"processed_at": "2025-11-29T14:00:00Z",
"metadata_stripped": true,
"url": "https://cdn.vizava.pro/temp/clean_823.png"
}
Bunker
Ephemeral text storage endpoints.
POST
/bunker/drop
Creates a new dead-drop. The server accepts an already encrypted string.
| Parameter | Type | Description |
|---|---|---|
| payload* | String | AES-256 encrypted cipher string. |
| turnstileToken* | String | Required for Standard Tier. |
| burn | Boolean | Delete after first read. Default: true. |
Response Example
201 Created
{
"drop_id": "bnk_x7f8s9",
"expires_at": "2025-11-30T14:00:00Z",
"access_url": "https://vizava.pro/v/bnk_x7f8s9"
}
Headless Automation PRO
High-volume automation via CLI tools (cURL, Python, wget) bypasses the Captcha requirement.
This feature requires a Pro API Key.
Errors
Vizava uses standard HTTP response codes to indicate the success or failure of an API request.
| 200 | OK - Success |
| 400 | Bad Request - Invalid parameters |
| 401 | Unauthorized - Invalid API Key |
| 404 | Not Found - Artifact does not exist |
| 429 | Too Many Requests - Rate limit exceeded |