HeavenMotioon API & MCP

curl https://your-domain.com/api/v1/generations \
  -H "Authorization: Bearer hm_sk_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "flux-2-pro",
    "prompt": "matte black perfume bottle, gold cap, studio light",
    "aspect_ratio": "16:9"
  }'

# then check it (holds up to 30 s while it is processing)
curl "https://your-domain.com/api/v1/generations/GENERATION_ID?wait=30" \
  -H "Authorization: Bearer hm_sk_YOUR_KEY"

Authorization: Bearer hm_sk_YOUR_KEY

curl -X POST https://your-domain.com/api/v1/uploads \
  -H "Authorization: Bearer hm_sk_…" \
  -F "[email protected]"
# → { "id": "cmh1…", "object": "upload", … }

curl -X POST https://your-domain.com/api/v1/generations \
  -H "Authorization: Bearer hm_sk_…" \
  -H "Content-Type: application/json" \
  -d '{"model":"kling-3.0","prompt":"the product slowly turns, soft studio light","duration":5,"image_id":"cmh1…"}'

{
  "id": "cmg8x2…",
  "object": "generation",
  "kind": "image",
  "model": "flux-2-pro",
  "prompt": "matte black perfume bottle, gold cap, studio light",
  "status": "processing",
  "output_url": null,
  "error": null,
  "source": "api",
  "created_at": "2026-10-10T08:00:00.000Z",
  "updated_at": "2026-10-10T08:00:00.000Z",
  "estimated_seconds": 30
}

curl "https://your-domain.com/api/v1/generations/GENERATION_ID?wait=30" \
  -H "Authorization: Bearer hm_sk_YOUR_KEY"

{
  "object": "list",
  "data": [ { "id": "cmg8x2…", "object": "generation", "status": "succeeded", … } ],
  "has_more": true,
  "next_cursor": "cmg8wq…"
}

{
  "object": "account",
  "email": "[email protected]",
  "plan": "pro",
  "status": "active",
  "active": true,
  "credits": 3300,
  "credits_used": 412,
  "credits_left": 2888,
  "period_end": "2026-11-09T08:00:00.000Z",
  "topup_credits_left": 300,
  "topup_expires_at": "2027-10-12T08:00:00.000Z",
  "total_credits_left": 3188
}

POST https://your-app.com/webhooks/heavenmotioon
HeavenMotioon-Event: generation.succeeded
HeavenMotioon-Signature: t=1791600000,v1=5f2c…

{
  "id": "evt_9c1e…",
  "type": "generation.succeeded",
  "created": 1791600000,
  "data": {
    "generation": {
      "id": "cm…",
      "object": "generation",
      "kind": "video",
      "model": "seedance-2.5",
      "prompt": "neon city at night, drone shot",
      "status": "succeeded",
      "output_url": "https://…/api/media/cm….mp4",
      "error": null,
      "source": "api",
      "created_at": "2026-10-10T08:00:00.000Z",
      "updated_at": "2026-10-10T08:02:41.000Z"
    }
  }
}

import crypto from "node:crypto";

// Use the RAW request body (e.g. express.raw({ type: "application/json" })).
export function verifyHeavenMotioon(rawBody, header, secret) {
  const parts = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  const t = Number(parts.t);
  if (!Number.isFinite(t) || Math.abs(Date.now() / 1000 - t) > 300) return false; // 5 min tolerance
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${parts.t}.${rawBody}`)
    .digest("hex");
  const given = String(parts.v1 ?? "");
  return given.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(given), Buffer.from(expected));
}

Login lewat browser — tidak perlu API key. Butuh domain https publik.

claude.ai  → Settings → Connectors → Add custom connector
ChatGPT    → Settings → Apps & Connectors → Create (developer mode)

Name : HeavenMotioon
URL  : https://your-domain.com/api/mcp

Klik Connect → login HeavenMotioon → Izinkan.

https://your-domain.com/.well-known/oauth-protected-resource/api/mcp
https://your-domain.com/.well-known/oauth-authorization-server

authorize  https://your-domain.com/oauth/authorize
token      https://your-domain.com/api/oauth/token
register   https://your-domain.com/api/oauth/register
revoke     https://your-domain.com/api/oauth/revoke