Conversion API.

Extras on top of a conversion (Fine or Ultra detail, repair, a larger triangle budget) are paid in credits, as on the pricing page; each API plan includes credits every month, and each key has its own credit ceiling.

1. Make a key. Sign in, open API keys… in the account menu, add your server's address, make the key and copy it. It is shown once.
2. Send the file. POST /api/convert with the file and a target_format. The answer is 202 with a job id.
3. Collect the result. GET /api/convert-job/<id> until it is not 202. A 200 is the converted file.

curl -s https://meshweave.app/api/convert \
  -H "Authorization: Bearer $MESHWEAVE_API_KEY" \
  -F file=@bracket.step \
  -F target_format=stl
# 202 {"job": "3f9c0a1e5b7d2c4e6a8f0b1d"}

curl -s -o bracket.stl -w "%{http_code}\n" \
  -H "Authorization: Bearer $MESHWEAVE_API_KEY" \
  https://meshweave.app/api/convert-job/3f9c0a1e5b7d2c4e6a8f0b1d
# 202 while it runs; 200 with the file when done; 4xx/5xx with {"detail": "..."} if not

import os, time, httpx

API = "https://meshweave.app"
HEAD = {"Authorization": f"Bearer {os.environ['MESHWEAVE_API_KEY']}"}

def convert(path: str, target: str) -> bytes:
    with httpx.Client(base_url=API, headers=HEAD, timeout=60, follow_redirects=False) as c:
        with open(path, "rb") as f:
            r = c.post("/api/convert", files={"file": f}, data={"target_format": target})
        r.raise_for_status()
        job = r.json()["job"]
        deadline = time.time() + 600
        while time.time() < deadline:
            r = c.get(f"/api/convert-job/{job}")
            if r.status_code == 202:
                time.sleep(2)
                continue
            if r.status_code == 200:
                return r.content
            raise RuntimeError(r.json().get("detail", r.text))
    raise TimeoutError(job)

Formats

The live list is at GET /api/convert/formats.

Errors

Every error has a JSON body {"detail": "..."} written for a person: log it or show it.

• A key converts and reads its own count, nothing else. It cannot reach your projects, files, billing or other keys.
• Send it only in the header Authorization: Bearer <key>. A key found in a URL is refused and marked exposed, because URLs are logged.
• Servers only. A request carrying a browser Origin is refused: a key in a web page can be read by anyone who opens it.
• Limit it to your addresses. Requests from anywhere else are refused, and the owner is emailed.
• Give it an expiry if it is for a test or a contractor. You are emailed when a key is made or revoked.
• We store only a hash of the key. Lost it? Revoke it and make a new one.