Use a workspace session, bearer token, X-API-Key, or X-Session-Token. Lists are scoped to your workspace. Only administrators may create vendors or export organization-wide audit records; only analysts and administrators may approve invoices. Request creators and workspace administrators manage request cancellation; approvers perform review duties. Purchases must have positive quantities and must be paid before dispatch. Coupons apply once per order.
OpenAPI schema · Postman collection · Protobuf service definition · SOAP WSDL · SOAP v2 WSDL · Build metadata
GraphQL queries and mutations use POST /graphql; subscriptions use the graphql-transport-ws protocol at /graphql/ws with authorization in connection parameters. Collaboration uses /ws/collaboration?access_token=… and envelopes {"op":"subscribe","projectId":"…"}, {"op":"note","projectId":"…","body":"Delivery schedule confirmed."}. Project events use /api/events?projectId=… and support Last-Event-ID resume. SOAP uses session or API authentication at /soap and /soap/v2. The v2 collaboration socket is /ws/v2; use the workspace origin when opening it.
Mobile clients may exchange access tokens through /api/auth/token-exchange using client workspace-mobile. Application mTLS is unavailable through this public deployment.
Public HTTPS supports the web application, REST, GraphQL, WebSocket, SSE and SOAP. Native gRPC and application mTLS are unavailable through this deployment.
Open vehicle operations. Both workspaces use the same account and session. Reconditioning approvals require an independent reviewer. Material changes require renewed approval. Payment events are generated by the local partner simulator.
| Method | Route | Operation |
|---|---|---|
| POST | /api/auth/login | Sign in |
| GET | /api/auth/session | Start a browser session |
| POST | /api/auth/refresh | Refresh access |
| POST | /api/auth/logout | Sign out |
| POST | /api/auth/forgot | Request account recovery |
| GET | /api/auth/recovery-preview | Preview current test identity recovery mailbox |
| POST | /api/auth/reset | Recover account |
| GET | /api/me | Current identity |
| GET | /api/mtls/me | Certificate identity |
| GET | /api/workspace/cases | List service cases |
| GET | /api/workspace/cases/{id} | Service case details |
| GET | /api/workspace/cases/{id}/notes | Service case notes |
| GET | /api/workspace/requests | List workspace requests |
| POST | /api/workspace/requests/{id}/cancel | Cancel workspace request |
| GET | /api/projects | List workspace projects |
| GET | /api/invoices | List invoices |
| GET | /api/invoices/{id} | Invoice details |
| POST | /api/invoices/{id}/approve | Approve invoice |
| GET | /api/projects/{id}/comments | Project discussion |
| POST | /api/projects/{id}/comments | Post discussion |
| POST | /api/profile | Update profile |
| POST | /api/admin/vendors | Create vendor (administrator operation) |
| POST | /api/directory/search | Search staff directory |
| POST | /api/diagnostics/resolve | Resolve integration hostname |
| GET | /api/integrations/config | Partner integration settings |
| POST | /api/integrations/preview | Preview partner resource |
| POST | /api/integrations/catalog | Import partner quote |
| POST | /api/reports | Create invoice export |
| GET | /api/reports/{id} | Export status |
| GET | /api/reports/{id}/download | Download export |
| POST | /api/reports/preview | Preview report layout |
| POST | /api/preferences/import | Import nested preferences |
| GET | /api/preferences/policy | Current export policy |
| POST | /api/imports/session | Import session |
| GET | /api/catalog | Browse supplies |
| GET | /api/orders | Order history |
| POST | /api/orders | Create purchase request |
| POST | /api/orders/{id}/checkout | Request checkout |
| POST | /api/orders/{id}/fulfill | Dispatch paid order |
| POST | /api/payments/confirm | Process payment confirmation |
| POST | /api/exports/bulk | Create copies of workspace export |
| GET | /api/audit/export | Export audit records (administrator operation) |
| GET | /api/events | Subscribe to project event stream |
| POST | /api/text/format | Format display text |
| POST | /api/auth/token-exchange | Exchange mobile access token |
| GET | /api/v2/invoices | List invoices (v2) |
| GET | /api/v2/invoices/{id} | Invoice details (v2) |
| GET | /api/v2/search | Search workspace (v2) |
| POST | /api/v2/profile | Update profile (v2) |
| POST | /api/v2/admin/vendors | Create vendor (v2) |
| POST | /api/v2/directory/search | Search staff directory (v2) |
| POST | /api/v2/diagnostics/resolve | Resolve integration hostname (v2) |
| POST | /api/v2/integrations/preview | Preview partner resource (v2) |
| POST | /api/v2/reports/preview | Preview report layout (v2) |
| POST | /api/v2/imports/session | Import session (v2) |
| POST | /api/v2/preferences/import | Import nested preferences (v2) |
| POST | /api/v2/payments/confirm | Process payment confirmation (v2) |
| GET | /api/v2/events | Subscribe to project event stream (v2) |
| GET | /api/assistant/config | Assistant configuration |
| POST | /api/assistant/documents | Import partner knowledge |
| POST | /api/assistant/chat | Discuss project with assistant |
| GET | /api/workspace/preferences | Notification and currency preferences |
| POST | /api/workspace/preferences | Save notification preferences |
| GET | /api/workspace/preferences/update | Legacy notification preference link |
| GET | /browser/connector | Embedded workspace notification settings |
| GET | /browser/connector.js | Workspace connector client |
| GET | /identity/.well-known/openid-configuration | Local identity discovery |
| GET | /identity/jwks | Local identity public keys |
| GET | /identity/:issuer/authorize | Authorize workspace application |
| POST | /identity/token | Exchange an application authorization code |
| GET | /api/identity/resources/:audience | Read an application resource |
| POST | /api/identity/dispatch | Record an authorized transport dispatch |
| GET | /identity/callback | Application authorization return |
| GET | /identity/report-callback | Application authorization return |
| GET | /api/files | List workspace attachment metadata |
| POST | /api/files | Upload a small UTF-8 fixture attachment |
| PUT | /api/files/:id | Replace an attachment version |
| POST | /api/files/:id/review | Record an attachment review for its current version |
| GET | /api/files/:id/download | Download a reviewed workspace attachment |
| GET | /api/files/:id/preview | Preview a reviewed attachment in an inert sandbox |
| GET | /api/file-storage | Resolve a path inside the synthetic attachment store |
| POST | /api/account-links/challenges | Begin linking a fictional fleet-provider identity |
| POST | /api/account-links | Complete a fictional fleet-provider account link |
| GET | /api/account-links | List linked provider accounts |
| GET | /api/partner-workspace | Read acquisition notes from the linked fictional provider |
| GET | /api/workspace-summary | Read a cached workspace procurement summary |
| POST | /api/workspace-summary/refresh | Invalidate cached summaries for an authorized workspace |
| POST | /api/export-jobs | Queue a workspace transport export |
| GET | /api/export-jobs/:id | Read the status of an export requested by this identity |
| GET | /api/export-jobs/:id/download | Download a completed workspace export |
| POST | /api/imports | Import bounded transport records for background report and index processing |
| GET | /api/imports/:id | Read workspace import processing status |
| GET | /api/imports/:id/report | Download a processed data-only transport report |
| GET | /api/search-index | Search transport records produced by background indexing |
| GET | /api/invitations/received | List invitations addressed to the current identity |
| POST | /api/invitations | Invite an identity into the current workspace |
| GET | /api/invitations/:id | Read an invitation landing-page summary |
| POST | /api/invitations/:id/accept | Accept a current workspace invitation |
| GET | /api/memberships | List this identity’s workspace memberships |
| POST | /api/memberships/:id/revoke | Remove a workspace membership |
| PATCH | /api/memberships/:id | Change a workspace membership role |
| GET | /api/collaboration/messages | Read current workspace collaboration messages |
| POST | /api/collaboration/messages | Post a transport collaboration update |
| GET | /api/collaboration/events | Subscribe to workspace collaboration events over SSE |
| GET | /api/document-events | Read acquisition document notification metadata |
| POST | /api/document-capabilities | Issue a short-lived acquisition document review capability |
| GET | /api/documents/download | Redeem a signed acquisition document review capability |
| GET | /api/commerce/overview | Purchasing, reservations, deposits and mock payment workflows |
| GET | /api/commerce/invoices | List workspace reconditioning invoices |
| POST | /api/commerce/invoices | Submit a reconditioning invoice |
| GET | /api/commerce/invoices/:id | Read a workspace invoice and its approval |
| PATCH | /api/commerce/invoices/:id | Update invoice amount, payment destination and attachments |
| POST | /api/commerce/invoices/:id/recall | Recall approval before revising an invoice |
| GET | /api/commerce/delegations | List workspace purchasing delegations |
| POST | /api/commerce/delegations | Delegate invoice approval duties within the workspace |
| DELETE | /api/commerce/delegations/:id | Revoke a purchasing delegation |
| POST | /api/commerce/invoices/:id/approve | Approve a submitted reconditioning invoice |
| POST | /api/commerce/invoices/:id/settle | Settle an approved invoice in the local payment ledger |
| GET | /api/commerce/commitments | List acquisition and transport commitments |
| POST | /api/commerce/commitments | Record an acquisition or transport commitment |
| GET | /api/commerce/deposits | List settled fictional vehicle deposits |
| GET | /api/commerce/deposits/:id/refunds | List local deposit refunds |
| POST | /api/commerce/deposits/:id/refunds | Issue a partial refund in the local ledger |
| GET | /api/commerce/vehicles | List fictional vehicle inventory |
| GET | /api/commerce/reservations | List workspace vehicle reservations |
| POST | /api/commerce/vehicles/:id/reservations | Reserve a fictional inventory vehicle |
| POST | /api/commerce/reservations/:id/cancel | Cancel an owned vehicle reservation |
| GET | /api/commerce/orders | List local transport and acquisition payment orders |
| POST | /api/commerce/orders | Create a synthetic transport dispatch order |
| GET | /api/commerce/orders/:id | Read a local transport payment order |
| PATCH | /api/commerce/orders/:id | Revise an unfulfilled dispatch and request a fresh payment |
| GET | /api/commerce/orders/:id/provider-events | List provider events for an owned dispatch order |
| POST | /api/commerce/orders/:id/simulate-payment | Ask the local payment simulator to produce a bound payment event |
| POST | /api/commerce/provider-events/:id/deliver | Deliver an existing signed local provider event |
| POST | /api/commerce/webhooks/payment | Receive a signed local provider notification |
| POST | /api/commerce/orders/:id/dispatch | Release a paid fictional transport dispatch |
| GET | /api/workspace | Workspace home |