The app
Setup, control, sharing, and accounts for each user.
Turn device data into operations, automation, business integrations, and platform revenue — beyond what the customer app can do.
The app serves each customer. The platform helps your company operate across every device and user. The Cloud API backend is one layer of custom smart home app development — choose the right app path first.
Setup, control, sharing, and accounts for each user.
Operations, automation, integrations, and revenue across the installed base.
See device status and recent activity across the installed base, so support can resolve issues faster.
Device APIs + real-time event messaging
Sync device and usage data with CRM, billing, warranty, maintenance, and partner tools.
Device, user, and data services
Run scheduled checks, alerts, and cross-device rules — even when the app is closed.
Pulsar-based Message Queue
Build subscriptions, premium features, or B2B portals on top of the installed base.
Recurring revenue models
Not every product needs a platform. We test the B2B, subscription, or operational case before you invest.
Separate customer app needs from company-wide workflows.
One user needs it: app. Your company needs it: platform.
| Product capability | App SDK | Cloud API |
|---|---|---|
| Pair, control, and manage devices in the app | Yes | — |
| Branded onboarding, rooms, sharing, user accounts | Yes | — |
| Device status pushed to a server (not just the phone) | — | Yes — Message Queue |
| Support/ops view of devices across all users | — | Yes — device & data APIs |
| Server-side automation, scheduled checks, alerts | — | Yes |
| Sync device/usage data into CRM, billing, or partner systems | — | Yes |
| Subscriptions, premium tiers, or a B2B/B2C portal | — | Yes |
Three decisions, in order: authenticate, match the project region, then choose how events reach your backend.
Token and request signing
Project and endpoint
Message Queue, not polling
Request a token, then sign each call with HMAC-SHA256 and a 13-digit timestamp. Cloud and app authorization use different modes.
Each project belongs to one region. A mismatch can look like a permission or “no data” error.
openapi.tuyacn.comApp account / devices in mainland China
openapi.tuyaus.comThe Americas — and the default for unmapped countries
openapi-ueaz.tuyaus.comProjects on the US-East center
openapi.tuyaeu.comMost EU deployments
openapi-weaz.tuyaeu.comProjects on the EU-West center
openapi.tuyain.comDevices/accounts in India
openapi-sg.iotbing.comNewer SE-Asia allocation (added June 2025)
Tuya's Message Queue pushes device status and alerts to your backend.
No. It earns its place when your team, business systems, or a new revenue line needs device data outside the app.
Only if launch depends on it. Otherwise, it is often a deliberate phase two.
Products with a B2B buyer, multi-unit workflow, subscription, or premium tier often do. The scope review tests that case before you build.
Use the region where the app account and devices were registered. Unmapped countries default to Western America.
A client ID and secret get an access token; each request is signed with HMAC-SHA256 and a timestamp. Cloud and app authorization use different signing modes.
Use Tuya's Pulsar-based Message Queue. It pushes status, online/offline events, and alerts without polling.
Separate must-have app work from platform work that can wait.