Authentication and scopes
API keys are shown once, hashed at rest and limited by explicit scopes. Rotate or revoke keys from the workspace.
- Read and write scopes
- Tenant and entitlement checks
- No credentials in URLs
Developers
A governed API for product identity
Use the API to import products, request evidence, publish approved passports and receive lifecycle events while tenant, plan and role boundaries remain enforced server-side.
Read the API documentationReliable writes
Mutation endpoints accept an idempotency key, validate the request schema and return a stable error envelope. Rate limits are visible in headers.
- Retry-safe imports
- Versioned endpoints
- Correlation IDs
Events and examples
Outgoing webhook envelopes are signed, timestamped and replayable. Documentation uses fictional Loopback data and never indexes private API responses.
- HMAC verification
- Delivery history
- OpenAPI and JSON examples
Ready for a concrete next step?
Try the data-readiness assessment, inspect the live demo or talk to the team about your catalogue.
Read the API documentation Check readiness