A1 Lab API docs

The A1 Lab (thea1lab.com / a1lab.com.br) publishes a contact endpoint for agents and for the site form. There is no product API, token auth, or MCP server.

When to use this

Use this endpoint to send a process or an idea to A1 Lab. For whether we are the right lab, read llms.txt.

Authentication

No API key. Browser form posts need a Cloudflare Turnstile token. Agents that cannot complete captcha should email contact@thea1lab.com.

Versioning and deprecation

The current public API is v1. The canonical path is POST /v1/contact. POST /api/contact is a stable alias used by the site form.

Breaking changes ship under /v2/. While v1 is current, responses include API-Version: 1. If a version is retired, responses include Deprecation: true and a Sunset HTTP-date, with at least 90 days of notice before removal.

Rate limits

The limit is 30 requests per hour per IP. Every API response includes the RFC RateLimit, RateLimit-Policy, RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset headers. A 429 includes Retry-After in seconds.

OpenAPI

• JSON: https://thea1lab.com/openapi.json
• YAML: https://thea1lab.com/api/openapi.yaml

Endpoint

POST https://thea1lab.com/v1/contact (canonical) or POST https://thea1lab.com/api/contact

Content-Type: application/json

{
  "name": "Ana Silva",
  "email": "ana@company.com",
  "company": "Company",
  "subject": "I have an idea to test",
  "stage": "Early idea",
  "message": "We want to test contract PDF extraction."
}

Success: { "ok": true }.

Errors are JSON with code, message, and hint. GET /v1/contact or /api/contact returns 405 in the same shape.