---
title: API overview
description: Explore the TaskSocial REST API, its base URL, and its authentication requirements.
url: https://tasksocial-docs.thally.app/api/introduction
---

# API overview

Explore the TaskSocial REST API, its base URL, and its authentication requirements.

The TaskSocial API is a REST API for account authentication and task management. Use it to register users, log in, create tasks, retrieve a user's tasks, view the shared task feed, and update or delete tasks.

## Base URL

The production API is hosted on Render:

```text
https://tasksocial-p2cw.onrender.com
```

All endpoints use the `/api/v1` path prefix. For example:

```text
POST https://tasksocial-p2cw.onrender.com/api/v1/auth/login
```

## Authentication

Registration and login do not require an existing authentication cookie. After a successful login, the server sets a JWT in an HTTP-only cookie named `tokenName`.

Protected requests must include this cookie. See the [Authentication reference](/api/authentication) for the login flow and examples.

## Available operations

### Authentication

| Method | Endpoint | Purpose |
| --- | --- | --- |
| `POST` | `/api/v1/auth/register` | Register a user |
| `POST` | `/api/v1/auth/login` | Log in |
| `POST` | `/api/v1/auth/logout` | Log out |

### Tasks

| Method | Endpoint | Purpose |
| --- | --- | --- |
| `POST` | `/api/v1/tasks/create` | Create a task |
| `GET` | `/api/v1/tasks/my-tasks` | Retrieve your tasks |
| `GET` | `/api/v1/tasks/feed` | Retrieve the shared task feed |
| `PUT` | `/api/v1/tasks/{id}` | Update a task |
| `DELETE` | `/api/v1/tasks/{id}` | Delete a task |

All task endpoints require authentication. Updating and deleting a task also require the authenticated user to own it.

## Try the API

Use the interactive endpoint pages to inspect request bodies and responses. For protected operations, log in first and make sure the client sends the `tokenName` cookie.

A `401 Unauthorized` response usually means the request is missing a valid authentication cookie. A `403 Forbidden` response from an update or delete operation means the authenticated user does not own the task.

## Related guides

- [Quickstart](/quickstart): make an authenticated request.
- [Authentication](/api/authentication): understand the login and cookie flow.
- [Authentication and Tasks](/guides/authentication-and-tasks): complete the task management workflow.