Keyless endpoints

There are also POST routes under /public/: subscribe, unsubscribe, contact, submissions, optout/request, optout/verify, checkout, auth/request, auth/verify and the key-management routes. Those belong to the website: they are what its forms post to, most are protected by a Turnstile token or a signed session, and none of them is part of the data API. They are documented under The website.

{ "code": "LAUNCH25", "percent": 25, "ends_at": "2026-10-31T21:59:59Z" }

A launch discount, where one is active, is applied automatically to a new monthly checkout: there is no code to enter. See The launch discount for the full rules, including why it is never combined with the annual price.

Access-Control-Allow-Origin: * is still set on /v1/*, so a signed request CAN be made from a browser, but do not put a paid key in client-side JavaScript where every visitor can read it out of the network tab. Call /v1/jobs from a server, a serverless function, or a build step, and let the client fetch YOUR endpoint instead. That is also why the earlier, keyless version of this example was safe to run straight from a browser and this one is not: nothing secret was ever in it.

const params = new URLSearchParams({ country: 'NL', limit: '20' });
const res = await fetch(`https://api.jobopportunitiesapi.org/v1/jobs?${params}`, {
  headers: { Authorization: `Bearer ${process.env.JOA_API_KEY}` },
});
const { data } = await res.json();
// ...render `data` into HTML server-side, or return it from your own API route.

Reconciliation, computed from the same response: 2,914,565 + 767,023 + 8,653,347 = 12,334,935 and ledger_rows is 12,334,935: they match exactly, which is the guarantee.

The report also carries stale: false and age_seconds: 2,142. stale: true means the snapshot behind these figures is older than its refresh window; treat the numbers as indicative and re-read the endpoint before quoting them.

Measured 27 October 2026, 10:52 UTC · rendered from /public/coverage, which needs no key. These figures move; the endpoint is always right and this page is only as fresh as its last build.

Rendered from /public/plans when this page was built. Only purchasable plans appear there, so this table is the price list: if a plan is not here, you cannot buy it. Compare on /pricing.

/public/market-signals/history?family&country&seniority&days=30|90|365

Same three axes and the same 30-listing publish floor as /public/market-signals (no title, no company; see that endpoint's own reasoning). days defaults to 30 when omitted and is refused (422 bad_days) for anything else. points is one entry per day a snapshot exists for that segment (sparse, not zero-filled), each carrying its own state (published/suppressed) exactly like the live endpoint's top-level state.

/public/companies/{slug}/open-roles-history?days=30|90|365

A plain open_roles count for one company, one point per snapshot day (each with a method of snapshot or reconstructed), never a job row, never a salary or time-to-fill figure (a per-employer pay breakdown stays out of every public surface, same posture as the live Market Signals endpoint refusing ?company=). An unknown slug returns 200 with an empty points array rather than 404, the same degrade-do-not-error shape as every other aggregate-only route on this site.