export const metadata = {
title: 'HTTP',
description:
'How Versia uses the HTTP protocol for all communications between instances.',
}
# HTTP
Versia uses the HTTP protocol for all communications between instances. HTTP requests must conform to certain standards to ensure compatibility between different implementations, as well as to ensure the security and integrity of the data being exchanged.
HTTP requests/responses between instances **must** include a [Signature](/signatures), signed with the [instance's private key](/entities/instance-metadata), as defined in [Signatures](/signatures).
## Requests
Must be `application/vnd.versia+json`, unless specified otherwise. Basic `application/json` is **not** allowed.
Must be `application/vnd.versia+json; charset=utf-8` if the request has a body.
See [Signatures](/signatures) for more information.
See [Signatures](/signatures).
See [Signatures](/signatures).
A string identifying the software making the request. Should contain the name of the software, its version, and a link to its homepage.
``` {{ 'title': 'Example User-Agent' }}
CoolServer/1.0 (https://coolserver.com)
```
```http {{ 'title': 'Example Request' }}
POST https://bob.com/.versia/v0.6/inbox HTTP/1.1
# This specific endpoint returns plain JSON
Accept: application/json
User-Agent: CoolServer/1.0 (https://coolserver.com)
Versia-Signature: /CjB2L9bcvRg+uP19B4/rqy7Ji9/cqMFPlL3GVCIndnQjYyOpBzJEAl9weDnXm7Jrqa3y6sBC+EYWKThO2r9Bw==
Versia-Signed-By: example.com
Versia-Signed-At: 1729241687
```
## Rate limits
Implementations **must** respect the rate limits of remote instances.
IETF draft [draft-polli-ratelimit-headers-02](https://www.ietf.org/archive/id/draft-polli-ratelimit-headers-02.html) **must** be used to communicate rate limits. Other rate limit headers/formats are not allowed.
This IETF draft is, well, a draft. However, there are no standards for rate limiting in HTTP, so this is the best we have.
## Responses
Must include `application/vnd.versia+json; charset=utf-8`, unless specified otherwise.
See [Signatures](/signatures) for more information.
See [Signatures](/signatures).
See [Signatures](/signatures).
```http {{ 'title': 'Example Response' }}
HTTP/1.1 200 OK
Content-Type: application/vnd.versia+json; charset=utf-8
Versia-Signature: /CjB2L9bcvRg+uP19B4/rqy7Ji9/cqMFPlL3GVCIndnQjYyOpBzJEAl9weDnXm7Jrqa3y6sBC+EYWKThO2r9Bw==+7BvnWKITyGyTwHbb6fVYwRx1I
Versia-Signed-By: example.com
Versia-Signed-At: 1729241717
```