API Store — Terms & Conditions

By listing an API on the Lumora API Store, you agree to the following:

1. Ownership & Data

You confirm you own or have the right to distribute the API you are listing. We do not collect, store, or share your API's data or your users' data. All traffic flows through our proxy — we do not log request/response content.

2. Endpoint URL Format (Important)

When listing your API, you must provide the base endpoint URL — NOT the full path to individual endpoints. The buyer specifies the path when calling your API.

Correct:

https://yourserver.com/api/v1

Wrong (will cause errors):

https://yourserver.com/api/v1/quotes/random

Buyers call your API like this:

{ "accessKey": "api_xxx", "method": "GET", "path": "quotes/random" }

The proxy appends the path to your base URL. If you provide the full path, it will be doubled and cause a 404 error.

3. Documentation & Examples (Required)

You must provide clear documentation for each API endpoint so buyers know how to use it. Your documentation should include:

• HTTP method — Clearly state if each endpoint is GET, POST, PUT, or DELETE
• Path — The path buyers will use (e.g. quotes/random, hash/generate)
• Request body — For POST/PUT, show the exact JSON body format with field descriptions
• Response format — Show what the API returns
• Query parameters — List all optional parameters

Never expose your actual server endpoint URL. In your documentation examples, always use the Lumora proxy URL:

https://api.lumorapp.name.ng/api/apistore/v1

Example documentation snippet:

Endpoint: POST https://api.lumorapp.name.ng/api/apistore/v1
Body: { "text": "hello", "algorithms": ["md5"] }

4. CORS Configuration

If your API has CORS (Cross-Origin Resource Sharing) enabled, you must add our proxy domain to your allowed origins:

https://api.lumorapp.name.ng

Without this, buyers won't be able to call your API through our proxy from browsers or web apps.

5. HTTP Methods

Make sure your API supports the correct HTTP methods. If an endpoint only accepts POST, buyers must use "method": "POST" in their request. GET-only or POST-only endpoints are fine — just document them clearly in your API description.

6. Commission & Pricing

Lumora takes a 20% commission on all paid API transactions. For free APIs, there is no charge at all — buyers use them completely free. You receive 80% of all earnings from paid APIs.

7. Deletion Policy

You may delete your listing at any time. Deleted APIs enter a 20-day grace period where existing buyers can still use them. After 20 days, the API is permanently removed. You can restore it during the grace period.

8. Suspicious Activity & Enforcement

We monitor for abuse to protect our users. The following can result in action against your account:

• APIs that contain malware, phishing, or malicious code
• APIs that harvest or leak user data
• Repeated complaints from buyers about your API
• Misleading descriptions or non-functional APIs
• APIs that violate Lumora's community guidelines

Violations may result in your API being removed from the store, and repeated or severe violations can lead to account suspension.

9. User Experience

We care about the experience of every user on our platform. APIs that consistently provide poor responses, excessive downtime, or bad support may be reviewed and actioned.

10. Payment & Payouts

Earnings from your APIs are tracked as Luma Coins in your account. You can use coins to purchase other APIs on the platform. Coin-to-cash withdrawal options may be available based on your region and account standing.