> ## Documentation Index > Fetch the complete documentation index at: https://docs.arcmira.com/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Arcmira has three API capabilities: Search (entities, mentions, appearances, commercial intelligence), Monitors (trackers plus alert delivery), and Transcripts (read, generate, correct). Community Review is the cross-surface correction layer. > Discover pages at https://docs.arcmira.com/llms.txt, then fetch the matching page's .md export. Each capability has a self-contained ' for coding agents' page; prefer it. > Auth: Authorization: Bearer arc_sk_... or x-api-key: arc_sk_... (x-api-key wins if both are sent). Never put keys in browser code. Check GET /v1/me for tier, scopes, and remaining rows before metered pulls. > Search: resolve names with GET /v1/entities/lookup and pin ent_* IDs before pulling metered rows. Only person entities have appearances. Mention and recommendation rows carry canonical numeric timestamps in start_seconds/end_seconds (integer seconds; 0 means full episode); the MM:SS string fields are deprecated. Commercial routes need Pro+ tier AND the recommendations:read scope and bill 10 rows per row. > Monitors: a tracker watches one entity; a monitor groups trackers with shared delivery (email, Slack, HMAC-signed webhooks). Create trackers with POST /v1/trackers, then attach by id: POST /v1/monitors/{id}/trackers { trackerIds: [...] }. Each fired alert occurrence debits 100 rows. Poll GET /v1/monitors/{id}/alerts?n= for recent deliveries. Send Idempotency-Key on every POST/PATCH. > Transcripts: switch on the access field (unlocked, locked, premium_pending, not_transcribed, unauthenticated). Honor Retry-After when polling POST /v1/transcriptions jobs. Corrections (POST /v1/videos/{video_id}/corrections; kinds line_edit, speaker_reassign, speaker_identify, add_person, entity_tag, segment_rewrite) cost 0 rows; anchored kinds need revision + anchor.contentHash (djb2 base-36); handle 409 (re-anchor) and 412 (expectedSeq). segment_rewrite replaces an inclusive segment range with new segments (empty replacements array deletes; timestamps repaired server-side). > Community Review is free (0 rows) and surface-typed: POST /v1/feedback with a type matching the surface you called, the reproducing query, and corrections targeting public IDs (ent_*, men_*, com_*). Nothing auto-applies. Do not send untyped notes. > Errors: switch on error.code, follow doc_url, quote X-Request-Id to support. Honor Retry-After on 429. Retries of POST/PATCH must reuse the same Idempotency-Key; replays return Idempotency-Replayed: true. # Rotate the monitor webhook signing secret > Generates a new signing secret and returns it in this response. Returned only once. Store it securely; it cannot be retrieved later. To recover from a lost secret, rotate. Zero-downtime overlap: the previous secret remains valid until previousSecretExpiresAt (24 hours); during the window every delivery carries an additional X-Arcmira-Signature-Previous header computed with the old secret over the same {timestamp}.{payload} string, so you can verify with either secret while you roll. After the window the old secret is dropped and the extra header disappears. Rotating again during the window replaces the previous secret and resets the window. Requires a configured webhook (webhookUrl set); otherwise 409 with code webhook_not_configured. Auto-disable interplay: rotation resets webhook_failures but never re-enables a webhook that was auto-disabled after repeated failures; to resume delivery, also PATCH the monitor with notifyWebhook: true. Requires the monitors:write scope. Supports the Idempotency-Key header (replays return the stored response with Idempotency-Replayed: true). ## OpenAPI ````yaml /openapi/arcmira-v1.json post /v1/monitors/{id}/webhook-secret/rotate openapi: 3.1.0 info: title: Arcmira API version: 1.0.0 contact: name: Arcmira url: https://arcmira.com servers: - url: https://api.arcmira.com security: [] paths: /v1/monitors/{id}/webhook-secret/rotate: post: tags: - Monitors summary: Rotate the monitor webhook signing secret description: >- Generates a new signing secret and returns it in this response. Returned only once. Store it securely; it cannot be retrieved later. To recover from a lost secret, rotate. Zero-downtime overlap: the previous secret remains valid until previousSecretExpiresAt (24 hours); during the window every delivery carries an additional X-Arcmira-Signature-Previous header computed with the old secret over the same {timestamp}.{payload} string, so you can verify with either secret while you roll. After the window the old secret is dropped and the extra header disappears. Rotating again during the window replaces the previous secret and resets the window. Requires a configured webhook (webhookUrl set); otherwise 409 with code webhook_not_configured. Auto-disable interplay: rotation resets webhook_failures but never re-enables a webhook that was auto-disabled after repeated failures; to resume delivery, also PATCH the monitor with notifyWebhook: true. Requires the monitors:write scope. Supports the Idempotency-Key header (replays return the stored response with Idempotency-Replayed: true). operationId: rotate_monitor_webhook_secret responses: '200': description: Success content: application/json: schema: $ref: '#/components/schemas/WebhookSecretRotateResponse' '400': description: Invalid request content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '401': description: Authentication error content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '402': description: Quota exceeded content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '403': description: Permission error content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '404': description: Not found content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '409': description: Conflict content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '429': description: Rate limit exceeded content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error '500': description: Server error content: application/json: schema: type: object properties: error: type: object properties: type: type: string code: type: string message: type: string param: type: string doc_url: type: string request_id: type: string required: - type - code - message - doc_url - request_id required: - error security: - bearerAuth: [] - apiKeyAuth: [] components: schemas: WebhookSecretRotateResponse: type: object properties: webhookSecret: type: string description: >- The NEW webhook signing secret ("whsec_..."). Returned only once. Store it securely; it cannot be retrieved later. To recover from a lost secret, rotate. webhookSecretHint: type: string description: >- Last 4 characters of the new secret, for identifying which secret you hold. previousSecretExpiresAt: type: - string - 'null' description: >- End of the 24-hour overlap window. Until then, deliveries carry an additional X-Arcmira-Signature-Previous header computed with the previous secret over the same {timestamp}.{payload} string, so you can verify with either secret while you roll. Null when the monitor had no previous secret (nothing to overlap). required: - webhookSecret - webhookSecretHint - previousSecretExpiresAt securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: arc_sk_* apiKeyAuth: type: apiKey in: header name: x-api-key ````