// resources / api wiki

📡 API Reference

All API endpoints require the X-Auth-Token header (session token from login). Multi-tenant isolation is automatic.

Authentication

MethodEndpointDescription
POST/api/auth/loginBody: { "email", "password", "mfa_code" } → Returns: { "token", "user": { ... } }
POST/api/auth/logoutHeader: X-Auth-Token: <token>

Documents

MethodEndpointDescription
POST/api/documents/uploadUpload file (multipart/form-data)
GET/api/documentsList company documents
GET/api/documents/{id}Get document + analysis result
DELETE/api/documents/{id}Delete document
GET/api/documents/{id}/versionsList version history

TPRM

MethodEndpointDescription
GET/api/tprm/vendorsList vendors
POST/api/tprm/vendorsCreate vendor
POST/api/tprm/vendors/{id}/assessTrigger assessment
POST/api/tprm/vendors/{id}/questionnaireSend questionnaire OTP link
GET/api/tprm/monitoring/checkTrigger monitoring events

Incidents

MethodEndpointDescription
GET/api/incidentsList incidents
POST/api/incidentsCreate incident
PATCH/api/incidents/{id}/statusChange status
POST/api/incidents/{id}/updatesPost update

Platform

MethodEndpointDescription
GET/api/statusLLM state, KB chunk count, user info