API
The HTTP API
One OpenAPI document is the source of truth for the surface. The Go server types and the TypeScript client are both generated from it, so a hand-written fetch call or handler signature is a defect rather than a shortcut.
OpenAPI 3.1 · contract version 0.2.0 · 186 operations · 18 areas · 87 permissions
Because the contract generates both ends, the reference on this site is the surface as it actually is rather than as it was last written up. What follows is what you need before the endpoint reference is useful.
Authentication
OIDC tokens for people, opaque service credentials for machines, and how a tenant is resolved.
Conventions
Identifiers, pagination, money as minor units, idempotency and how the contract changes.
Errors
RFC 9457 problem details, the stable type URIs clients match on, and reading a refusal.
Endpoint reference
Every operation, grouped by domain area, with its required permission.
186 operations