calories api
create api keys at account. send Authorization: Bearer YOUR_KEY. browser requests use secure session cookies. mutations require an origin header matching the application origin; command-line clients must include it too. data belongs to the authenticated account. invalid credentials return 401; account outages return 503.
curl -H 'Authorization: Bearer YOUR_KEY' https://calories.dorianmarie.com/api/identity
| method | path | purpose |
|---|---|---|
| get | /api | public application metadata |
| get | /api/identity | authenticated identity |
| get | /api/meals?day=YYYY-MM-DD | private meals, original inputs, and total for a day; account required |
| post | /api/meals | save {id,day,description,calories,estimated,assumptions,original_description,original_calories,original_photo}; original_photo is a jpeg/png/webp data url up to 10 MB; same-origin, account required |
| post | /api/estimate | estimate {description,photo} with gpt-6-astra; photo is a data url up to 3 MB; returns editable calories, description, assumptions; 50 attempts per account per UTC day |
| get | /api/photos/{meal_id} | original private meal photo; owner account required; never cached |