Iyctt developer guide

Quickstart

Deploy your first workflow in under five minutes.

$ npm i -g @iyctt/cli
$ iyctt login
$ iyctt init my-flow
$ cd my-flow && iyctt deploy

Copy

Install the CLI

The Iyctt CLI runs on Node 18+ and is distributed via npm:

npm install --global @iyctt/cli

Authentication

All API requests require a bearer token scoped to a project:

Authorization: Bearer sk_live_2n8fJq...

Create scoped API keys from the dashboard. Keys can be restricted to specific workflows and IP ranges.

Workflows

A workflow is a typed handler that runs on a trigger:

import { defineWorkflow } from "@iyctt/sdk";

export default defineWorkflow({
  name: "welcome-email",
  trigger: { source: "user.created" },
  async handler(event, ctx) {
    await ctx.email.send({ to: event.email, template: "welcome" });
  },
});

Webhooks

Inbound webhooks are signed with HMAC-SHA256 using a per-source secret.

Verify signatures with the SDK:

import { verifyWebhook } from "@iyctt/sdk/webhooks";

const ok = await verifyWebhook(request, env("WEBHOOK_SECRET"));
if (!ok) return new Response("unauthorized", { status: 401 });

Retries & idempotency

Every workflow invocation includes an Idempotency-Key that Iyctt uses to deduplicate replays. Failed steps back off exponentially and are checkpointed to durable state.

API reference

The API is versioned in the URL. All endpoints return JSON.

Error codes

Errors follow a stable schema. Client SDKs surface them as typed exceptions.

{
  "error": {
    "code": "validation_failed",
    "message": "One or more fields are invalid.",
    "details": { "trigger": "Unknown source: github.pull" }
  }
}

Rate limits

Rate limits are enforced per project. When exceeded, the API returns 429 Too Many Requests with a Retry-After header.

SDKs

• @iyctt/sdk — TypeScript / JavaScript
• github.com/iyctt/go-sdk — Go
• iyctt — Python (PyPI)

All SDKs are generated from the same OpenAPI spec and released in lockstep.