{ "item": [ { "name": "mandates", "description": "", "item": [ { "id": "1a45bce4-1e7e-443d-a3ee-a9d786ea017b", "name": "Create a new mandate", "request": { "name": "Create a new mandate", "description": { "content": "Creates a new delegation mandate between a principal and a delegate.\nThe mandate defines the scope of delegated authority, optional constraints,\nand an expiration date. A KMS-signed audit event is emitted on success.\n", "type": "text/plain" }, "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"principal\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"metadata\": {},\n \"expires_at\": \"\",\n \"taxonomy_id\": \"\",\n \"taxonomy_version\": \"w--ps4cutf@237310918.5.533880911-w4\",\n \"require_approval\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "e2394887-b541-4a72-9fd2-cf6b05e42254", "name": "Mandate created", "originalRequest": { "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"principal\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"metadata\": {},\n \"expires_at\": \"\",\n \"taxonomy_id\": \"\",\n \"taxonomy_version\": \"w--ps4cutf@237310918.5.533880911-w4\",\n \"require_approval\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Created", "code": 201, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"tenant_id\": \"\",\n \"version\": \"\",\n \"status\": \"DRAFT\",\n \"principal\": {\n \"type\": \"ORGANIZATION\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"AI_AGENT\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"proof\": {\n \"creation_method\": \"EUDI_WALLET\",\n \"issuer\": \"\",\n \"created_by\": \"\",\n \"mandate_hash\": \"\",\n \"signature\": \"\",\n \"eidas_loa\": \"\"\n },\n \"metadata\": {},\n \"created_at\": \"\",\n \"updated_at\": \"\",\n \"expires_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "da903160-b713-485a-b540-9ddb23c43bb6", "name": "Invalid request", "originalRequest": { "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"principal\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"metadata\": {},\n \"expires_at\": \"\",\n \"taxonomy_id\": \"\",\n \"taxonomy_version\": \"w--ps4cutf@237310918.5.533880911-w4\",\n \"require_approval\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "05f861b9-93dd-4966-9b6c-661c3fc1c1c2", "name": "Authentication required", "originalRequest": { "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"principal\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"metadata\": {},\n \"expires_at\": \"\",\n \"taxonomy_id\": \"\",\n \"taxonomy_version\": \"w--ps4cutf@237310918.5.533880911-w4\",\n \"require_approval\": false\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "0d40bfef-7430-45a1-8641-e7f1566cebd0", "name": "List mandates (paginated)", "request": { "name": "List mandates (paginated)", "description": { "content": "Returns a paginated list of mandates for the authenticated tenant.\nSupports optional filtering by status and cursor-based pagination.\n", "type": "text/plain" }, "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": " (This can only be one of DRAFT,ACTIVE,SUSPENDED,REVOKED,EXPIRED)", "type": "text/plain" }, "key": "status", "value": "SUSPENDED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "282378b2-b1cf-4fbb-a726-d48b178b64c0", "name": "Paginated list of mandates", "originalRequest": { "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": " (This can only be one of DRAFT,ACTIVE,SUSPENDED,REVOKED,EXPIRED)", "type": "text/plain" }, "key": "status", "value": "SUSPENDED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"items\": [\n {\n \"mandate_id\": \"\",\n \"tenant_id\": \"\",\n \"version\": \"\",\n \"status\": \"SUSPENDED\",\n \"principal\": {\n \"type\": \"AI_AGENT\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"HUMAN\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"proof\": {\n \"creation_method\": \"OAUTH2\",\n \"issuer\": \"\",\n \"created_by\": \"\",\n \"mandate_hash\": \"\",\n \"signature\": \"\",\n \"eidas_loa\": \"\"\n },\n \"metadata\": {},\n \"created_at\": \"\",\n \"updated_at\": \"\",\n \"expires_at\": \"\"\n },\n {\n \"mandate_id\": \"\",\n \"tenant_id\": \"\",\n \"version\": \"\",\n \"status\": \"REVOKED\",\n \"principal\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"ORGANIZATION\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"proof\": {\n \"creation_method\": \"API_KEY\",\n \"issuer\": \"\",\n \"created_by\": \"\",\n \"mandate_hash\": \"\",\n \"signature\": \"\",\n \"eidas_loa\": \"\"\n },\n \"metadata\": {},\n \"created_at\": \"\",\n \"updated_at\": \"\",\n \"expires_at\": \"\"\n }\n ],\n \"next_cursor\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "ba623ba1-a2db-434c-ad7a-9c0e5a104126", "name": "Authentication required", "originalRequest": { "url": { "path": [ "mandates" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": " (This can only be one of DRAFT,ACTIVE,SUSPENDED,REVOKED,EXPIRED)", "type": "text/plain" }, "key": "status", "value": "SUSPENDED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "{id}", "description": "", "item": [ { "id": "53fdca40-2558-48d4-acb7-a9ece2def0c2", "name": "Get mandate by ID", "request": { "name": "Get mandate by ID", "description": { "content": "Retrieves a single mandate by its ID. Returns the full mandate record\nincluding principal, delegate, scope, constraints, and proof metadata.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "db533f3d-3ece-4f3d-80f9-f7676554102e", "name": "Mandate details", "originalRequest": { "url": { "path": [ "mandates", ":id" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"tenant_id\": \"\",\n \"version\": \"\",\n \"status\": \"DRAFT\",\n \"principal\": {\n \"type\": \"ORGANIZATION\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"delegate\": {\n \"type\": \"AI_AGENT\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"scope\": {\n \"actions\": [\n \"\",\n \"\"\n ],\n \"resources\": [\n \"\",\n \"\"\n ],\n \"effect\": \"ALLOW\",\n \"conditions\": {}\n },\n \"constraints\": {\n \"max_uses\": \"\",\n \"time_window\": {\n \"start\": \"\",\n \"end\": \"\"\n },\n \"geo_fence\": {\n \"allowed_regions\": [\n \"\",\n \"\"\n ]\n },\n \"require_mfa\": \"\",\n \"ip_whitelist\": [\n \"\",\n \"\"\n ],\n \"escalation_rules\": {\n \"deviation_above_percent\": \"\",\n \"escalate_to\": \"\",\n \"escalation_method\": \"\"\n }\n },\n \"proof\": {\n \"creation_method\": \"EUDI_WALLET\",\n \"issuer\": \"\",\n \"created_by\": \"\",\n \"mandate_hash\": \"\",\n \"signature\": \"\",\n \"eidas_loa\": \"\"\n },\n \"metadata\": {},\n \"created_at\": \"\",\n \"updated_at\": \"\",\n \"expires_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "fd4150fa-88bd-49e2-9d6d-175d7b1a31ac", "name": "Resource not found", "originalRequest": { "url": { "path": [ "mandates", ":id" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "revoke", "description": "", "item": [ { "id": "666c2feb-55c3-488a-998a-ae6d85cfe5fe", "name": "Revoke a mandate", "request": { "name": "Revoke a mandate", "description": { "content": "Permanently revokes a mandate. Only active or suspended mandates can be\nrevoked. An optional reason can be provided. A KMS-signed audit event is emitted.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "revoke" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "c08ab44d-2500-4246-b03e-2090ae067d16", "name": "Mandate revoked", "originalRequest": { "url": { "path": [ "mandates", ":id", "revoke" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"status\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "1837c83f-436b-4dd2-9fa6-08d66604041c", "name": "State conflict", "originalRequest": { "url": { "path": [ "mandates", ":id", "revoke" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "suspend", "description": "", "item": [ { "id": "458e8401-1999-481c-b89a-296d04d04d74", "name": "Suspend a mandate", "request": { "name": "Suspend a mandate", "description": { "content": "Temporarily suspends an active mandate. Suspended mandates can be\nreactivated later. An optional reason can be provided.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "suspend" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "369fe9c8-fb38-4010-940b-4576aca262a1", "name": "Mandate suspended", "originalRequest": { "url": { "path": [ "mandates", ":id", "suspend" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"status\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "831d8fd5-38c1-4f34-97e9-20dae73fd5ba", "name": "State conflict", "originalRequest": { "url": { "path": [ "mandates", ":id", "suspend" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "reactivate", "description": "", "item": [ { "id": "dc2fb282-5d85-4272-9e5f-5b5410c181de", "name": "Reactivate a suspended mandate", "request": { "name": "Reactivate a suspended mandate", "description": { "content": "Reactivates a previously suspended mandate, returning it to ACTIVE status.\nOnly mandates in SUSPENDED state can be reactivated.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "reactivate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": {}, "auth": null }, "response": [ { "id": "6ee6724a-62d6-4e80-9b8e-b5a4a4083953", "name": "Mandate reactivated", "originalRequest": { "url": { "path": [ "mandates", ":id", "reactivate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"status\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "53482a19-a726-4d77-92ca-19ec3a172afe", "name": "State conflict", "originalRequest": { "url": { "path": [ "mandates", ":id", "reactivate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": {} }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "approve", "description": "", "item": [ { "id": "b6f588de-072e-4ab1-8774-2a322461ff2b", "name": "Approve a pending mandate", "request": { "name": "Approve a pending mandate", "description": { "content": "Approves a mandate that is in PENDING_APPROVAL state, transitioning it\nto ACTIVE. Only mandates created with `require_approval: true` enter\nthis state. An audit event (MANDATE_APPROVED) is emitted.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "approve" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "48dd31c1-b8eb-4792-be68-406a1a6545e6", "name": "Mandate approved", "originalRequest": { "url": { "path": [ "mandates", ":id", "approve" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"status\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "a702de3a-9dcd-4cd4-aee6-7dd7c7ef216c", "name": "Resource not found", "originalRequest": { "url": { "path": [ "mandates", ":id", "approve" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "37f15d68-3167-4a13-bad3-9311edc40bdc", "name": "State conflict", "originalRequest": { "url": { "path": [ "mandates", ":id", "approve" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "reject", "description": "", "item": [ { "id": "b13c68d7-4dbf-4582-974b-be01699b4d2e", "name": "Reject a pending mandate", "request": { "name": "Reject a pending mandate", "description": { "content": "Rejects a mandate that is in PENDING_APPROVAL state, transitioning it\nto REVOKED. An audit event (MANDATE_REJECTED) is emitted.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "reject" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "c0b9c957-651b-42e1-83c1-422a66a0cd80", "name": "Mandate rejected", "originalRequest": { "url": { "path": [ "mandates", ":id", "reject" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mandate_id\": \"\",\n \"status\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "5e2aa1f7-0e1a-403a-9f4f-f73a858a6b3a", "name": "Resource not found", "originalRequest": { "url": { "path": [ "mandates", ":id", "reject" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "117ec24b-3daf-4c05-bd6d-549c956cd61d", "name": "State conflict", "originalRequest": { "url": { "path": [ "mandates", ":id", "reject" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "events", "description": "", "item": [ { "id": "2f94666a-7992-45c9-a2c9-cc3ec898e3d3", "name": "Get audit events for a mandate", "request": { "name": "Get audit events for a mandate", "description": { "content": "Returns a paginated list of audit events for a specific mandate.\nEvents form an immutable, hash-chained audit trail.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "3528cf4b-23b1-4b3b-b794-0cefe2207ef1", "name": "Paginated list of events", "originalRequest": { "url": { "path": [ "mandates", ":id", "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"items\": [\n {\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"VERIFICATION_DENIED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"HUMAN\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n },\n {\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"MANDATE_REACTIVATED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"HUMAN\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n }\n ],\n \"next_cursor\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "21c6b8f9-624d-4ec2-be56-a7bdfb404793", "name": "Authentication required", "originalRequest": { "url": { "path": [ "mandates", ":id", "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c0c0e6d8-10b2-4147-aacb-945a6d7a65f7", "name": "Resource not found", "originalRequest": { "url": { "path": [ "mandates", ":id", "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "evidence-pack", "description": "", "item": [ { "id": "fec3a572-6cc1-48c5-b971-ea22664df7db", "name": "Export a court-ready evidence pack", "request": { "name": "Export a court-ready evidence pack", "description": { "content": "Exports a comprehensive, court-ready evidence pack for a mandate containing:\n- Mandate snapshot at export time\n- Hash-chained audit event log\n- SD-JWT proof tokens from verification events\n- Case log hash (SHA-256 fingerprint over canonical event chain)\n- Issuer DID document reference for independent verification\n\nThe `case_log_hash` is a deterministic SHA-256 digest computed over the\ncanonical JSON representation of the event chain, enabling tamper detection.\n\nThe `schema_version` field allows forward-compatible evolution of the pack format.\n", "type": "text/plain" }, "url": { "path": [ "mandates", ":id", "evidence-pack" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Scope the evidence pack to a specific verification event", "type": "text/plain" }, "key": "event_id", "value": "" } ], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "a95ad6f1-9ae8-48c9-97e4-474b85d95a3e", "name": "Evidence pack exported successfully", "originalRequest": { "url": { "path": [ "mandates", ":id", "evidence-pack" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Scope the evidence pack to a specific verification event", "type": "text/plain" }, "key": "event_id", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"schema_version\": \"\",\n \"export_timestamp\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"mandate_snapshot\": {},\n \"event_chain\": [\n {\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"MANDATE_EXPIRED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"SERVICE\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n },\n {\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"MANDATE_SUSPENDED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"ORGANIZATION\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n }\n ],\n \"event_count\": \"\",\n \"case_log_hash\": \"\",\n \"chain_integrity\": {\n \"first_event_hash\": \"\",\n \"last_event_hash\": \"\",\n \"genesis_verified\": \"\"\n },\n \"issuer\": {\n \"did\": \"\",\n \"did_document_url\": \"\"\n },\n \"proof_tokens\": [\n \"\",\n \"\"\n ],\n \"crypto_metadata\": {\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\",\n \"case_log_hash_algorithm\": \"\"\n },\n \"metadata\": {\n \"mandate_created_at\": \"\",\n \"mandate_status\": \"\",\n \"export_requested_by\": \"\",\n \"event_id_filter\": \"\"\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "b15104c4-b2bf-4766-ab5a-fa5d7517c58b", "name": "Authentication required", "originalRequest": { "url": { "path": [ "mandates", ":id", "evidence-pack" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Scope the evidence pack to a specific verification event", "type": "text/plain" }, "key": "event_id", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "4706305f-6810-4bf5-91f8-92ae2aa8e43f", "name": "Resource not found", "originalRequest": { "url": { "path": [ "mandates", ":id", "evidence-pack" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Scope the evidence pack to a specific verification event", "type": "text/plain" }, "key": "event_id", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "verify", "description": "", "item": [ { "id": "161bcabd-e737-498a-9f20-623b3f6c78c4", "name": "Verify if an action is authorized by a mandate", "request": { "name": "Verify if an action is authorized by a mandate", "description": { "content": "Performance-critical endpoint. Target: < 50ms p99 latency (without PoM),\n< 200ms p99 (with PoM). Returns ALLOW or DENY with optional escalation\nmetadata and an optional Proof-of-Mandate Verifiable Credential.\n", "type": "text/plain" }, "url": { "path": [ "verify" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Request a Proof-of-Mandate Verifiable Credential in the response.\nThe VC is an SD-JWT signed by the Mandaitor issuer DID.\n (This can only be one of sd-jwt-vc)", "type": "text/plain" }, "key": "pom", "value": "sd-jwt-vc" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"action\": \"\",\n \"resource\": \"\",\n \"delegate_subject_id\": \"\",\n \"agent_id\": \"\",\n \"context\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "ab77b6e4-b80d-410b-bf03-ebaa24f196de", "name": "Verification result (with optional Proof-of-Mandate VC)", "originalRequest": { "url": { "path": [ "verify" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Request a Proof-of-Mandate Verifiable Credential in the response.\nThe VC is an SD-JWT signed by the Mandaitor issuer DID.\n (This can only be one of sd-jwt-vc)", "type": "text/plain" }, "key": "pom", "value": "sd-jwt-vc" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"action\": \"\",\n \"resource\": \"\",\n \"delegate_subject_id\": \"\",\n \"agent_id\": \"\",\n \"context\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"decision\": \"ALLOW\",\n \"mandate_id\": \"\",\n \"event_id\": \"\",\n \"reason_codes\": [\n \"ESCALATION_REQUIRED\",\n \"NO_MATCHING_MANDATE\"\n ],\n \"constraints_remaining\": {},\n \"proof_of_mandate\": {\n \"compact\": \"\",\n \"payload\": {\n \"vct\": \"ProofOfMandate\",\n \"decision\": \"ALLOW\",\n \"mandate_id\": \"\",\n \"verification_event_id\": \"\",\n \"verification_timestamp\": \"\",\n \"requested_action\": \"\",\n \"requested_resource\": \"\",\n \"delegate_subject_id\": \"\",\n \"principal_subject_id\": \"\",\n \"tenant_id\": \"\",\n \"reason_codes\": [\n \"\",\n \"\"\n ],\n \"constraints_snapshot\": {},\n \"latency_ms\": \"\",\n \"iss\": \"\",\n \"sub\": \"\",\n \"iat\": \"\",\n \"exp\": \"\",\n \"_sd_alg\": \"\"\n }\n },\n \"proof_token\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "0c2bc08b-86a3-4310-a7b1-a5ef9a139460", "name": "Invalid request", "originalRequest": { "url": { "path": [ "verify" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Request a Proof-of-Mandate Verifiable Credential in the response.\nThe VC is an SD-JWT signed by the Mandaitor issuer DID.\n (This can only be one of sd-jwt-vc)", "type": "text/plain" }, "key": "pom", "value": "sd-jwt-vc" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"action\": \"\",\n \"resource\": \"\",\n \"delegate_subject_id\": \"\",\n \"agent_id\": \"\",\n \"context\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "9e58620a-1be9-4cca-bdb9-b51ab1cb5f1e", "name": "Authentication required", "originalRequest": { "url": { "path": [ "verify" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Request a Proof-of-Mandate Verifiable Credential in the response.\nThe VC is an SD-JWT signed by the Mandaitor issuer DID.\n (This can only be one of sd-jwt-vc)", "type": "text/plain" }, "key": "pom", "value": "sd-jwt-vc" } ], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"action\": \"\",\n \"resource\": \"\",\n \"delegate_subject_id\": \"\",\n \"agent_id\": \"\",\n \"context\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "eudi", "description": "", "item": [ { "name": "sessions", "description": "", "item": [ { "id": "6ebcb135-e476-46d0-bc42-962e37e80321", "name": "Initiate EUDI Wallet verification session", "request": { "name": "Initiate EUDI Wallet verification session", "description": { "content": "Creates a new OpenID4VP session for EUDI Wallet identity verification.\nReturns a QR code URI (cross-device) and deep link URI (same-device)\nthat the user scans/opens with their EUDI Wallet.\n", "type": "text/plain" }, "url": { "path": [ "eudi", "sessions" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"presentation_definition_id\": \"mandaitor-pid-standard\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "da0b8a03-6fb0-465b-94ae-f1ef61de2282", "name": "Session created", "originalRequest": { "url": { "path": [ "eudi", "sessions" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"presentation_definition_id\": \"mandaitor-pid-standard\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Created", "code": 201, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"session_id\": \"\",\n \"status\": \"PENDING\",\n \"request_uri\": \"\",\n \"qr_code_uri\": \"\",\n \"deep_link_uri\": \"\",\n \"expires_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "35dfcaf5-7b6b-4bf1-999e-e90a9ac765b7", "name": "Invalid request", "originalRequest": { "url": { "path": [ "eudi", "sessions" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"presentation_definition_id\": \"mandaitor-pid-standard\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "3b4a5e23-b061-40be-9ddf-ddd3f1a0c165", "name": "Authentication required", "originalRequest": { "url": { "path": [ "eudi", "sessions" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"presentation_definition_id\": \"mandaitor-pid-standard\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "{sessionId}", "description": "", "item": [ { "id": "115b6c4c-df84-4fb9-b32f-5a226b9b4018", "name": "Poll EUDI session status", "request": { "name": "Poll EUDI session status", "description": { "content": "Polls the status of an EUDI Wallet verification session.\nReturns the resolved identity when the session is completed.\n", "type": "text/plain" }, "url": { "path": [ "eudi", "sessions", ":sessionId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "sessionId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "c3243f88-e920-4a1d-af74-66b6bbbe2507", "name": "Session status", "originalRequest": { "url": { "path": [ "eudi", "sessions", ":sessionId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "sessionId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"session_id\": \"\",\n \"status\": \"EXPIRED\",\n \"created_at\": \"\",\n \"presentation_definition_id\": \"\",\n \"resolved_identity\": {\n \"subject_id\": \"\",\n \"subject_type\": \"NATURAL_PERSON\",\n \"provider\": \"EUDI_WALLET\",\n \"display_name\": \"\",\n \"assurance_level\": \"HIGH\",\n \"eidas_attributes\": {\n \"unique_id\": \"\",\n \"family_name\": \"\",\n \"given_name\": \"\",\n \"birth_date\": \"\",\n \"nationality\": \"\",\n \"pid_issuer\": \"\",\n \"issuing_country\": \"\",\n \"assurance_level\": \"LOW\"\n }\n },\n \"verified_at\": \"\",\n \"errors\": [\n \"\",\n \"\"\n ]\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c278bf7e-c9ab-4d11-9746-884d45f5ecc1", "name": "Resource not found", "originalRequest": { "url": { "path": [ "eudi", "sessions", ":sessionId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "sessionId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "response", "description": "", "item": [ { "id": "a1db88c5-18e8-45e6-ab67-c02db1ea521a", "name": "Receive VP Token from EUDI Wallet", "request": { "name": "Receive VP Token from EUDI Wallet", "description": { "content": "Receives the VP Token from the EUDI Wallet via direct_post response mode.\nThis endpoint is called by the wallet after user consent. No authentication\nrequired as the wallet POSTs directly.\n", "type": "text/plain" }, "url": { "path": [ "eudi", "sessions", ":sessionId", "response" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "sessionId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"vp_token\": \"\",\n \"presentation_submission\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "ccf81dae-566e-42cd-93b1-1533a5a9b117", "name": "VP Token accepted and verified", "originalRequest": { "url": { "path": [ "eudi", "sessions", ":sessionId", "response" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "sessionId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"vp_token\": \"\",\n \"presentation_submission\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"status\": \"COMPLETED\",\n \"session_id\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "d095a082-c3a2-46ba-b1e7-8160c0b56eca", "name": "Invalid request", "originalRequest": { "url": { "path": [ "eudi", "sessions", ":sessionId", "response" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "sessionId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"vp_token\": \"\",\n \"presentation_submission\": {}\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "request", "description": "", "item": [ { "name": "{requestId}", "description": "", "item": [ { "id": "9bd4bdc1-71ab-479c-a775-9c94d39e529e", "name": "Serve OpenID4VP Authorization Request Object", "request": { "name": "Serve OpenID4VP Authorization Request Object", "description": { "content": "Serves the signed JWT Authorization Request Object that the EUDI Wallet\nfetches after scanning the QR code. Returns the JWT directly with\ncontent type application/oauth-authz-req+jwt.\n", "type": "text/plain" }, "url": { "path": [ "eudi", "request", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/oauth-authz-req+jwt" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "3669f88d-7d29-4684-b3df-944b8d12f656", "name": "Signed JWT Request Object", "originalRequest": { "url": { "path": [ "eudi", "request", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/oauth-authz-req+jwt" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/oauth-authz-req+jwt" } ], "body": "", "cookie": [], "_postman_previewlanguage": "text" }, { "id": "694f0137-460b-4588-bc57-3fa9b9f12f39", "name": "Resource not found", "originalRequest": { "url": { "path": [ "eudi", "request", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "tenants", "description": "", "item": [ { "name": "{id}", "description": "", "item": [ { "name": "identity-providers", "description": "", "item": [ { "id": "e97714c7-338c-4571-9e3c-d35b67d7b984", "name": "Get tenant identity provider configuration", "request": { "name": "Get tenant identity provider configuration", "description": {}, "url": { "path": [ "tenants", ":id", "identity-providers" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "27bf8f1d-16fa-43cc-a828-a9672a02205e", "name": "Identity provider configuration", "originalRequest": { "url": { "path": [ "tenants", ":id", "identity-providers" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"tenant_id\": \"\",\n \"identity_providers\": {\n \"enabled_providers\": [\n \"AUTH0\",\n \"GOOGLE\"\n ],\n \"auth0\": {\n \"domain\": \"\",\n \"audience\": \"\",\n \"client_id\": \"\"\n },\n \"okta\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"entra\": {\n \"tenant_id\": \"\",\n \"client_id\": \"\"\n },\n \"eudi\": {\n \"rp_id\": \"\",\n \"presentation_policies\": [\n \"\",\n \"\"\n ]\n },\n \"google\": {\n \"client_id\": \"\",\n \"hosted_domain\": \"\"\n },\n \"aws_iam_idc\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"generic_oidc\": {\n \"name\": \"\",\n \"issuer\": \"\",\n \"audience\": \"\",\n \"subject_prefix\": \"j-xqo1\"\n }\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "e271c1ea-9d96-4320-ba56-1ba7fc0e39dc", "name": "Resource not found", "originalRequest": { "url": { "path": [ "tenants", ":id", "identity-providers" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "0352c7e3-8e37-4ef8-87b3-99747cb0d34a", "name": "Update tenant identity provider configuration", "request": { "name": "Update tenant identity provider configuration", "description": {}, "url": { "path": [ "tenants", ":id", "identity-providers" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"enabled_providers\": [\n \"OKTA\",\n \"EUDI_WALLET\"\n ],\n \"auth0\": {\n \"domain\": \"\",\n \"audience\": \"\",\n \"client_id\": \"\"\n },\n \"okta\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"entra\": {\n \"tenant_id\": \"\",\n \"client_id\": \"\"\n },\n \"eudi\": {\n \"rp_id\": \"\",\n \"presentation_policies\": [\n \"\",\n \"\"\n ]\n },\n \"google\": {\n \"client_id\": \"\",\n \"hosted_domain\": \"\"\n },\n \"aws_iam_idc\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"generic_oidc\": {\n \"name\": \"\",\n \"issuer\": \"\",\n \"audience\": \"\",\n \"subject_prefix\": \"ddb7f2d-\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "77a9926f-68b4-4637-955a-bf1dd046131e", "name": "Configuration updated", "originalRequest": { "url": { "path": [ "tenants", ":id", "identity-providers" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"enabled_providers\": [\n \"OKTA\",\n \"EUDI_WALLET\"\n ],\n \"auth0\": {\n \"domain\": \"\",\n \"audience\": \"\",\n \"client_id\": \"\"\n },\n \"okta\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"entra\": {\n \"tenant_id\": \"\",\n \"client_id\": \"\"\n },\n \"eudi\": {\n \"rp_id\": \"\",\n \"presentation_policies\": [\n \"\",\n \"\"\n ]\n },\n \"google\": {\n \"client_id\": \"\",\n \"hosted_domain\": \"\"\n },\n \"aws_iam_idc\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"generic_oidc\": {\n \"name\": \"\",\n \"issuer\": \"\",\n \"audience\": \"\",\n \"subject_prefix\": \"ddb7f2d-\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"tenant_id\": \"\",\n \"identity_providers\": {\n \"enabled_providers\": [\n \"AUTH0\",\n \"GOOGLE\"\n ],\n \"auth0\": {\n \"domain\": \"\",\n \"audience\": \"\",\n \"client_id\": \"\"\n },\n \"okta\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"entra\": {\n \"tenant_id\": \"\",\n \"client_id\": \"\"\n },\n \"eudi\": {\n \"rp_id\": \"\",\n \"presentation_policies\": [\n \"\",\n \"\"\n ]\n },\n \"google\": {\n \"client_id\": \"\",\n \"hosted_domain\": \"\"\n },\n \"aws_iam_idc\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"generic_oidc\": {\n \"name\": \"\",\n \"issuer\": \"\",\n \"audience\": \"\",\n \"subject_prefix\": \"j-xqo1\"\n }\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "1723e4a0-2905-443e-aafe-452a4c165be3", "name": "Invalid request", "originalRequest": { "url": { "path": [ "tenants", ":id", "identity-providers" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"enabled_providers\": [\n \"OKTA\",\n \"EUDI_WALLET\"\n ],\n \"auth0\": {\n \"domain\": \"\",\n \"audience\": \"\",\n \"client_id\": \"\"\n },\n \"okta\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"entra\": {\n \"tenant_id\": \"\",\n \"client_id\": \"\"\n },\n \"eudi\": {\n \"rp_id\": \"\",\n \"presentation_policies\": [\n \"\",\n \"\"\n ]\n },\n \"google\": {\n \"client_id\": \"\",\n \"hosted_domain\": \"\"\n },\n \"aws_iam_idc\": {\n \"issuer\": \"\",\n \"audience\": \"\"\n },\n \"generic_oidc\": {\n \"name\": \"\",\n \"issuer\": \"\",\n \"audience\": \"\",\n \"subject_prefix\": \"ddb7f2d-\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "api-keys", "description": "", "item": [ { "id": "845cc7c2-975e-4747-9b31-14564910b5dc", "name": "Generate a new API key for the tenant", "request": { "name": "Generate a new API key for the tenant", "description": { "content": "Generates a new API key for a tenant. The raw key is returned only once\nin the response and cannot be retrieved again. Requires Cognito JWT.\n", "type": "text/plain" }, "url": { "path": [ "tenants", ":id", "api-keys" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"name\": \"\",\n \"scopes\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "fab2cd69-5bb8-401b-95f8-7a1a864e8e4f", "name": "API key created", "originalRequest": { "url": { "path": [ "tenants", ":id", "api-keys" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"name\": \"\",\n \"scopes\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Created", "code": 201, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"key_id\": \"\",\n \"api_key\": \"\",\n \"name\": \"\",\n \"scopes\": [\n \"\",\n \"\"\n ],\n \"created_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "3dfa12aa-aa49-4482-ba33-02f550483095", "name": "Authentication required", "originalRequest": { "url": { "path": [ "tenants", ":id", "api-keys" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"name\": \"\",\n \"scopes\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "widget-config", "description": "", "item": [ { "id": "d648c627-b984-4af2-acd4-cdd5f08a555a", "name": "Get tenant widget configuration", "request": { "name": "Get tenant widget configuration", "description": { "content": "Retrieves the widget configuration for a tenant. Returns the latest\nversion by default, or a specific version if the version query parameter is provided.\n", "type": "text/plain" }, "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "1b527971-4602-4223-978f-2f150904acd0", "name": "Widget configuration", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"tenant_id\": \"\",\n \"widget_id\": \"\",\n \"identity_providers\": [\n {\n \"provider\": \"eidas_eudi\",\n \"enabled\": \"\",\n \"config\": {}\n },\n {\n \"provider\": \"okta\",\n \"enabled\": \"\",\n \"config\": {}\n }\n ],\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ],\n \"branding\": {\n \"primary_color\": \"\",\n \"logo_url\": \"\",\n \"company_name\": \"\"\n },\n \"approval_workflow\": {\n \"require_principal_approval\": \"\",\n \"require_admin_approval\": \"\",\n \"auto_approve_trusted_idps\": \"\"\n },\n \"webhook_url\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "3426990b-95ff-4acf-b120-92b8590a3615", "name": "Authentication required", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "f572d926-bb40-449c-8f9f-0bfe65293ba3", "name": "Resource not found", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "3d827d71-3b06-4a47-b1f8-e3663f81447d", "name": "Update tenant widget configuration", "request": { "name": "Update tenant widget configuration", "description": { "content": "Updates the widget configuration for a tenant. Creates a new versioned\nrecord. IdP credentials are stored in AWS Secrets Manager.\n", "type": "text/plain" }, "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ],\n \"branding\": {},\n \"approval_workflow\": {},\n \"webhook_url\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "b4bba64e-a29b-48f7-bd7a-347cab3c6660", "name": "Configuration updated", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ],\n \"branding\": {},\n \"approval_workflow\": {},\n \"webhook_url\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"tenant_id\": \"\",\n \"widget_id\": \"\",\n \"identity_providers\": [\n {\n \"provider\": \"eidas_eudi\",\n \"enabled\": \"\",\n \"config\": {}\n },\n {\n \"provider\": \"okta\",\n \"enabled\": \"\",\n \"config\": {}\n }\n ],\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ],\n \"branding\": {\n \"primary_color\": \"\",\n \"logo_url\": \"\",\n \"company_name\": \"\"\n },\n \"approval_workflow\": {\n \"require_principal_approval\": \"\",\n \"require_admin_approval\": \"\",\n \"auto_approve_trusted_idps\": \"\"\n },\n \"webhook_url\": \"\",\n \"updated_at\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "26b3599a-62e3-4a4d-9289-f2883c1721fb", "name": "Invalid request", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ],\n \"branding\": {},\n \"approval_workflow\": {},\n \"webhook_url\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "0603f731-7a67-4f14-8578-9955a63a3f46", "name": "Authentication required", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ],\n \"branding\": {},\n \"approval_workflow\": {},\n \"webhook_url\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "validate-idp", "description": "", "item": [ { "id": "4d5a3791-38bd-4515-8ef0-cd3bbf8c38fd", "name": "Validate an IdP connection", "request": { "name": "Validate an IdP connection", "description": { "content": "Validates an Identity Provider configuration by attempting a client\ncredentials flow against the specified provider (Entra ID, Auth0, Okta, or eIDAS).\n\n**Alias support:** Accepts both `provider` (canonical) and `idpType` (legacy).\nIf both are present, `provider` takes precedence.\n", "type": "text/plain" }, "url": { "path": [ "tenants", ":id", "widget-config", "validate-idp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"config\": {},\n \"provider\": \"okta\",\n \"idpType\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "46389fb1-6a8f-4782-9028-6938badfa89e", "name": "Validation result", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "validate-idp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"config\": {},\n \"provider\": \"okta\",\n \"idpType\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"results\": {\n \"key_0\": {\n \"valid\": \"\",\n \"message\": \"\"\n },\n \"key_1\": {\n \"valid\": \"\",\n \"message\": \"\"\n },\n \"key_2\": {\n \"valid\": \"\",\n \"message\": \"\"\n }\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "b6807491-7797-40a5-97a4-1005bc292597", "name": "Invalid request", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "validate-idp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"config\": {},\n \"provider\": \"okta\",\n \"idpType\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "96b9d5ac-de61-459d-92fb-8fb240e7ab66", "name": "Authentication required", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "validate-idp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"config\": {},\n \"provider\": \"okta\",\n \"idpType\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "versions", "description": "", "item": [ { "id": "3dc04358-92bd-40da-92f3-b74cda537c90", "name": "List widget configuration versions", "request": { "name": "List widget configuration versions", "description": { "content": "Returns a paginated list of all configuration versions for the tenant,\nsorted by version number descending (newest first). Each entry contains\nversion metadata (not the full configuration body).\n", "type": "text/plain" }, "url": { "path": [ "tenants", ":id", "widget-config", "versions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "20" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "07a44ebb-86a2-4f4f-94ab-8c54dc30919e", "name": "List of configuration versions", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "versions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "20" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"versions\": [\n {\n \"configVersion\": \"\",\n \"updatedAt\": \"\",\n \"createdAt\": \"\",\n \"status\": \"\",\n \"widgetId\": \"\",\n \"rollbackFrom\": \"\"\n },\n {\n \"configVersion\": \"\",\n \"updatedAt\": \"\",\n \"createdAt\": \"\",\n \"status\": \"\",\n \"widgetId\": \"\",\n \"rollbackFrom\": \"\"\n }\n ],\n \"next_cursor\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "0af302ed-8361-4684-b30c-83bc69815b42", "name": "Invalid request", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "versions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "20" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "f46664ba-e86e-4593-a228-2a9df8c7e1ae", "name": "Authentication required", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "versions" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "20" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "rollback", "description": "", "item": [ { "id": "54553310-b109-46c3-af3f-182c87b34c88", "name": "Rollback widget configuration to a previous version", "request": { "name": "Rollback widget configuration to a previous version", "description": { "content": "Rolls back the widget configuration to a previous version by creating a\nnew version that is a copy of the target version. This preserves the\nfull version history for audit purposes — no versions are deleted.\n\nThe new version includes a `rollbackFrom` field indicating which version\nit was copied from.\n", "type": "text/plain" }, "url": { "path": [ "tenants", ":id", "widget-config", "rollback" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"version\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "550643fb-f923-4859-95a0-01cd4a6846fc", "name": "Rollback successful", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "rollback" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"version\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"message\": \"\",\n \"version\": \"\",\n \"rollbackFrom\": \"\",\n \"widgetId\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "86119bf6-dd31-4b42-80c2-6020e6707096", "name": "Invalid request", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "rollback" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"version\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c1fad69c-2485-4f3e-a06b-312ae6bceee5", "name": "Authentication required", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "rollback" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"version\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "6887e866-e344-461c-9edb-df1464645b46", "name": "Resource not found", "originalRequest": { "url": { "path": [ "tenants", ":id", "widget-config", "rollback" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"version\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ] }, { "name": "identity", "description": "", "item": [ { "name": "token-exchange", "description": "", "item": [ { "id": "c29fc874-0f3f-4ba9-bb7c-994ae15cab90", "name": "OAuth 2.0 Token Exchange for delegation chains", "request": { "name": "OAuth 2.0 Token Exchange for delegation chains", "description": { "content": "Exchange a user's access token for a scoped delegation token.\nImplements RFC 8693 Token Exchange for On-Behalf-Of (OBO) flows\nwhere AI agents act on behalf of authenticated users.\n", "type": "text/plain" }, "url": { "path": [ "identity", "token-exchange" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"subject_token\": \"\",\n \"mandate_id\": \"\",\n \"subject_token_type\": \"urn:ietf:params:oauth:token-type:access_token\",\n \"scope\": \"\",\n \"audience\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "be5a1d32-e59c-4ddf-bd7a-adefa01a6fe3", "name": "Token exchanged", "originalRequest": { "url": { "path": [ "identity", "token-exchange" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"subject_token\": \"\",\n \"mandate_id\": \"\",\n \"subject_token_type\": \"urn:ietf:params:oauth:token-type:access_token\",\n \"scope\": \"\",\n \"audience\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"access_token\": \"\",\n \"token_type\": \"Bearer\",\n \"expires_in\": \"\",\n \"scope\": \"\",\n \"issued_token_type\": \"\",\n \"delegation\": {\n \"mandate_id\": \"\",\n \"principal\": \"\",\n \"delegate\": \"\",\n \"provider\": \"\"\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "614769bd-95c9-4188-a35e-20eeb1e6a4d8", "name": "Invalid request", "originalRequest": { "url": { "path": [ "identity", "token-exchange" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"subject_token\": \"\",\n \"mandate_id\": \"\",\n \"subject_token_type\": \"urn:ietf:params:oauth:token-type:access_token\",\n \"scope\": \"\",\n \"audience\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "f7551b28-ce66-4958-b41c-dff55960dcae", "name": "Insufficient permissions", "originalRequest": { "url": { "path": [ "identity", "token-exchange" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"subject_token\": \"\",\n \"mandate_id\": \"\",\n \"subject_token_type\": \"urn:ietf:params:oauth:token-type:access_token\",\n \"scope\": \"\",\n \"audience\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Forbidden", "code": 403, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "scim", "description": "", "item": [ { "name": "v2", "description": "", "item": [ { "name": "Users", "description": "", "item": [ { "id": "c61a4179-b18b-44a6-b24a-3cc1d776ab9d", "name": "List provisioned users", "request": { "name": "List provisioned users", "description": {}, "url": { "path": [ "scim", "v2", "Users" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "startIndex", "value": "1" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "count", "value": "100" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/scim+json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "5bae3748-6f3c-4c2d-a64b-5bfe29e41bee", "name": "SCIM ListResponse", "originalRequest": { "url": { "path": [ "scim", "v2", "Users" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "startIndex", "value": "1" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "count", "value": "100" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/scim+json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/scim+json" } ], "body": "{}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "5747e3b7-b951-49ab-a779-d882df3e4317", "name": "Authentication required", "originalRequest": { "url": { "path": [ "scim", "v2", "Users" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "startIndex", "value": "1" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "count", "value": "100" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "1c2a31c6-c199-4879-a269-e0720f7f73ec", "name": "Provision a new user", "request": { "name": "Provision a new user", "description": {}, "url": { "path": [ "scim", "v2", "Users" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/scim+json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "1b215f64-d331-417e-ad37-b50db65de9af", "name": "User created", "originalRequest": { "url": { "path": [ "scim", "v2", "Users" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/scim+json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Created", "code": 201, "header": [ { "key": "Content-Type", "value": "application/scim+json" } ], "body": "{}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "59fc7ba7-38c3-429d-a435-016c07d4b1f0", "name": "Invalid request", "originalRequest": { "url": { "path": [ "scim", "v2", "Users" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "{userId}", "description": "", "item": [ { "id": "ef32a17d-0e19-4894-9535-a0b675f01c73", "name": "Get a provisioned user", "request": { "name": "Get a provisioned user", "description": {}, "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "userId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "abf1e86a-474f-4793-90ca-ac74d3ad0a64", "name": "SCIM User", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [], "cookie": [], "_postman_previewlanguage": "text" }, { "id": "8d007c07-1e64-4b8e-b8e4-367b95fa97b0", "name": "Resource not found", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "94ddefda-d490-404e-a2f1-5e093f0eb32a", "name": "Replace a user", "request": { "name": "Replace a user", "description": {}, "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "userId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/json" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "74a9c850-266f-41f7-85f4-52b8cf3be792", "name": "User updated", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [], "cookie": [], "_postman_previewlanguage": "text" }, { "id": "37719c4b-d157-477d-b844-55827f62fac2", "name": "Resource not found", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PUT", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "0b509f2f-0745-4122-a94a-224ff7a581cc", "name": "Partially update a user", "request": { "name": "Partially update a user", "description": {}, "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "userId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/json" } ], "method": "PATCH", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "7f4ade83-026f-4d92-87b9-8b1b048cd727", "name": "User updated", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PATCH", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [], "cookie": [], "_postman_previewlanguage": "text" }, { "id": "18b39216-a60f-4920-b97b-a893aaccfea7", "name": "Resource not found", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "key": "Content-Type", "value": "application/scim+json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "PATCH", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "b6c3c14a-ac91-403f-8127-ae7b62597fe8", "name": "Deprovision a user (revokes all mandates)", "request": { "name": "Deprovision a user (revokes all mandates)", "description": {}, "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "userId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "DELETE", "body": {}, "auth": null }, "response": [ { "id": "3cf11ea1-eae0-4688-9317-5f73edd23c01", "name": "User deleted", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "DELETE", "body": {} }, "status": "No Content", "code": 204, "header": [], "cookie": [], "_postman_previewlanguage": "text" }, { "id": "e949b35f-00f3-44ac-8836-0e404aaf6194", "name": "Resource not found", "originalRequest": { "url": { "path": [ "scim", "v2", "Users", ":userId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "userId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "DELETE", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ] }, { "name": "health", "description": "", "item": [ { "id": "dbd9b897-46bc-48ab-bfb1-36948108ac36", "name": "Health/status check", "request": { "name": "Health/status check", "description": { "content": "Returns service health status. No sensitive data is exposed.\nSuitable for monitoring, load balancers, and Trust Center embedding.\n", "type": "text/plain" }, "url": { "path": [ "health" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "b6410a16-d5e4-412d-a6c8-86fad25bdf2f", "name": "Service is healthy", "originalRequest": { "url": { "path": [ "health" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"status\": \"ok\",\n \"timestamp\": \"\",\n \"version\": \"\",\n \"stage\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": ".well-known", "description": "", "item": [ { "name": "did.json", "description": "", "item": [ { "id": "de5f44a6-ce65-45b5-8f63-989d430b2b3f", "name": "Resolve the Mandaitor issuer DID document", "request": { "name": "Resolve the Mandaitor issuer DID document", "description": { "content": "Returns the W3C DID Document for the Mandaitor issuer DID\n(did:web:api.mandaitor.io). Contains the public key used to\nverify Proof-of-Mandate SD-JWT VCs.\n", "type": "text/plain" }, "url": { "path": [ ".well-known", "did.json" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/did+json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "7ee39df2-ae44-4bfa-bb60-43b828a337d3", "name": "DID Document", "originalRequest": { "url": { "path": [ ".well-known", "did.json" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/did+json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/did+json" } ], "body": "{\n \"@context\": [\n \"\",\n \"\"\n ],\n \"id\": \"\",\n \"authentication\": [\n \"\",\n \"\"\n ],\n \"assertionMethod\": [\n \"\",\n \"\"\n ]\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "27576344-89f3-4bb4-b82f-b364418cff25", "name": "Resource not found", "originalRequest": { "url": { "path": [ ".well-known", "did.json" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "trust.json", "description": "", "item": [ { "id": "1e1fad20-5865-428f-99f1-60d790ff0bdb", "name": "Public trust signals for machine-readable trust metadata", "request": { "name": "Public trust signals for machine-readable trust metadata", "description": { "content": "Returns machine-readable trust metadata including region, partition,\nissuer DID, data residency claims, and supported open standards.\nUnauthenticated and cache-friendly (5-minute client, 10-minute CDN).\n", "type": "text/plain" }, "url": { "path": [ ".well-known", "trust.json" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "b68153a4-519f-44a0-ba64-62b1123f8b2f", "name": "Trust signals", "originalRequest": { "url": { "path": [ ".well-known", "trust.json" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"schema_version\": \"\",\n \"region\": \"\",\n \"partition\": \"\",\n \"issuer_did\": \"\",\n \"did_document_url\": \"\",\n \"data_residency\": {\n \"primary_region\": \"\",\n \"partition\": \"\",\n \"jurisdiction\": \"\"\n },\n \"open_standards\": [\n \"\",\n \"\"\n ],\n \"build_version\": \"\",\n \"stage\": \"\",\n \"timestamp\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "events", "description": "", "item": [ { "id": "b40ee962-b44e-4ae2-83f8-867e1352e476", "name": "Query all events for the tenant", "request": { "name": "Query all events for the tenant", "description": { "content": "Queries all audit events for the authenticated tenant, filtered by mandate_id.\nSupports optional event_type filtering and cursor-based pagination.\n", "type": "text/plain" }, "url": { "path": [ "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Mandate ID to filter events by", "type": "text/plain" }, "key": "mandate_id", "value": "" }, { "disabled": false, "description": { "content": " (This can only be one of MANDATE_CREATED,MANDATE_SUSPENDED,MANDATE_REACTIVATED,MANDATE_REVOKED,VERIFICATION_ALLOWED,VERIFICATION_DENIED,ESCALATION_TRIGGERED)", "type": "text/plain" }, "key": "event_type", "value": "ESCALATION_TRIGGERED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "72f5235d-c9bb-4650-9fa7-8b029b4eccac", "name": "Paginated list of events", "originalRequest": { "url": { "path": [ "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Mandate ID to filter events by", "type": "text/plain" }, "key": "mandate_id", "value": "" }, { "disabled": false, "description": { "content": " (This can only be one of MANDATE_CREATED,MANDATE_SUSPENDED,MANDATE_REACTIVATED,MANDATE_REVOKED,VERIFICATION_ALLOWED,VERIFICATION_DENIED,ESCALATION_TRIGGERED)", "type": "text/plain" }, "key": "event_type", "value": "ESCALATION_TRIGGERED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"items\": [\n {\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"VERIFICATION_DENIED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"HUMAN\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n },\n {\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"MANDATE_REACTIVATED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"HUMAN\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n }\n ],\n \"next_cursor\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "7b88edf2-ae24-452b-a68e-8775a55f24ec", "name": "Authentication required", "originalRequest": { "url": { "path": [ "events" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Mandate ID to filter events by", "type": "text/plain" }, "key": "mandate_id", "value": "" }, { "disabled": false, "description": { "content": " (This can only be one of MANDATE_CREATED,MANDATE_SUSPENDED,MANDATE_REACTIVATED,MANDATE_REVOKED,VERIFICATION_ALLOWED,VERIFICATION_DENIED,ESCALATION_TRIGGERED)", "type": "text/plain" }, "key": "event_type", "value": "ESCALATION_TRIGGERED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "{id}", "description": "", "item": [ { "id": "3700b19c-33c9-4630-932a-c895d8ccd74d", "name": "Get a specific event by ID", "request": { "name": "Get a specific event by ID", "description": { "content": "Retrieves a single audit event by its ID. Requires the mandate_id query\nparameter to locate the event in the partition.\n", "type": "text/plain" }, "url": { "path": [ "events", ":id" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Mandate ID the event belongs to", "type": "text/plain" }, "key": "mandate_id", "value": "" } ], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "a9fd0e97-d795-43dd-b771-51b673c1ae5e", "name": "Event details", "originalRequest": { "url": { "path": [ "events", ":id" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Mandate ID the event belongs to", "type": "text/plain" }, "key": "mandate_id", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"event_id\": \"\",\n \"tenant_id\": \"\",\n \"mandate_id\": \"\",\n \"event_type\": \"ESCALATION_TRIGGERED\",\n \"timestamp\": \"\",\n \"actor\": {\n \"type\": \"HUMAN\",\n \"subject_id\": \"\",\n \"display_name\": \"\",\n \"identity_provider\": \"\",\n \"identity_token_hash\": \"\"\n },\n \"details\": {},\n \"previous_event_hash\": \"\",\n \"event_hash\": \"\",\n \"kms_signature\": \"\",\n \"hash_algorithm\": \"\",\n \"signing_algorithm\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "6e9a30e6-a1ce-47ba-a17b-8d79c75241d9", "name": "Resource not found", "originalRequest": { "url": { "path": [ "events", ":id" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "(Required) Mandate ID the event belongs to", "type": "text/plain" }, "key": "mandate_id", "value": "" } ], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "onboarding", "description": "", "item": [ { "name": "request", "description": "", "item": [ { "id": "83a7d0ac-0f4f-46b7-8673-e9bd775391c0", "name": "Submit an access request (no auth required)", "request": { "name": "Submit an access request (no auth required)", "description": { "content": "Submits a new tenant access request. No authentication required.\nThe request enters PENDING state and must be approved by an admin.\n", "type": "text/plain" }, "url": { "path": [ "onboarding", "request" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"company_name\": \"\",\n \"contact_email\": \"\",\n \"use_case\": \"\",\n \"contact_name\": \"\",\n \"industry\": \"construction\",\n \"website\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "4118ec02-0e7e-44f8-aad9-9fef0e2d25df", "name": "Access request submitted", "originalRequest": { "url": { "path": [ "onboarding", "request" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"company_name\": \"\",\n \"contact_email\": \"\",\n \"use_case\": \"\",\n \"contact_name\": \"\",\n \"industry\": \"construction\",\n \"website\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Created", "code": 201, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"request_id\": \"\",\n \"status\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "6abb0a13-3abb-4219-ba36-70187cd60ad5", "name": "Invalid request", "originalRequest": { "url": { "path": [ "onboarding", "request" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"company_name\": \"\",\n \"contact_email\": \"\",\n \"use_case\": \"\",\n \"contact_name\": \"\",\n \"industry\": \"construction\",\n \"website\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "admin", "description": "", "item": [ { "name": "onboarding", "description": "", "item": [ { "id": "3aeeb54c-88ea-4996-bea7-f5efe4162e2f", "name": "List onboarding access requests (admin only)", "request": { "name": "List onboarding access requests (admin only)", "description": { "content": "Lists onboarding access requests. Supports optional status filtering\n(PENDING, APPROVED, REJECTED) and cursor-based pagination.\nRequires Cognito JWT with mandaitor-admins group membership.\n", "type": "text/plain" }, "url": { "path": [ "admin", "onboarding" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Filter by request status (This can only be one of PENDING,APPROVED,REJECTED)", "type": "text/plain" }, "key": "status", "value": "APPROVED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "7c59c330-e475-42b4-a8a7-83e0cd21dba8", "name": "Paginated list of onboarding requests", "originalRequest": { "url": { "path": [ "admin", "onboarding" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Filter by request status (This can only be one of PENDING,APPROVED,REJECTED)", "type": "text/plain" }, "key": "status", "value": "APPROVED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requests\": [\n {\n \"request_id\": \"\",\n \"company_name\": \"\",\n \"contact_name\": \"\",\n \"contact_email\": \"\",\n \"use_case\": \"\",\n \"website\": \"\",\n \"status\": \"REJECTED\",\n \"submitted_at\": \"\",\n \"reviewed_at\": \"\",\n \"reviewed_by\": \"\",\n \"tenant_id\": \"\"\n },\n {\n \"request_id\": \"\",\n \"company_name\": \"\",\n \"contact_name\": \"\",\n \"contact_email\": \"\",\n \"use_case\": \"\",\n \"website\": \"\",\n \"status\": \"APPROVED\",\n \"submitted_at\": \"\",\n \"reviewed_at\": \"\",\n \"reviewed_by\": \"\",\n \"tenant_id\": \"\"\n }\n ],\n \"next_cursor\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "d561d9d1-a59f-432e-bf54-8543ff0a9a29", "name": "Authentication required", "originalRequest": { "url": { "path": [ "admin", "onboarding" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Filter by request status (This can only be one of PENDING,APPROVED,REJECTED)", "type": "text/plain" }, "key": "status", "value": "APPROVED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "dba11556-5619-4bc1-813f-b28dd591e8ea", "name": "Admin group membership required", "originalRequest": { "url": { "path": [ "admin", "onboarding" ], "host": [ "{{baseUrl}}" ], "query": [ { "disabled": false, "description": { "content": "Filter by request status (This can only be one of PENDING,APPROVED,REJECTED)", "type": "text/plain" }, "key": "status", "value": "APPROVED" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "limit", "value": "50" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "cursor", "value": "" } ], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "Forbidden", "code": 403, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "name": "{requestId}", "description": "", "item": [ { "name": "{action}", "description": "", "item": [ { "id": "fd58b868-90a8-4706-9dbc-eafffd9b8d13", "name": "Approve or reject an access request", "request": { "name": "Approve or reject an access request", "description": { "content": "Processes an admin action on an onboarding request.\nSupported values for `{action}`: `approve`, `reject`.\n", "type": "text/plain" }, "url": { "path": [ "admin", "onboarding", ":requestId", ":action" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } }, { "type": "any", "value": "approve", "key": "action", "disabled": false, "description": { "content": "(Required) (This can only be one of approve,reject)", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"notes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "affa4db7-1111-4621-8cb7-16547a6b2c8f", "name": "Request reviewed", "originalRequest": { "url": { "path": [ "admin", "onboarding", ":requestId", ":action" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" }, { "disabled": false, "description": { "content": "(Required) (This can only be one of approve,reject)", "type": "text/plain" }, "type": "any", "value": "approve", "key": "action" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"notes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [], "cookie": [], "_postman_previewlanguage": "text" }, { "id": "d5acdca4-10b5-4cc6-b209-753a33c44ef3", "name": "Tenant activated", "originalRequest": { "url": { "path": [ "admin", "onboarding", ":requestId", ":action" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" }, { "disabled": false, "description": { "content": "(Required) (This can only be one of approve,reject)", "type": "text/plain" }, "type": "any", "value": "approve", "key": "action" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"notes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Created", "code": 201, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"tenant_id\": \"\",\n \"company_name\": \"\",\n \"plan\": \"\",\n \"status\": \"ACTIVE\",\n \"created_at\": \"\",\n \"api_keys\": [\n {\n \"key_id\": \"\",\n \"name\": \"\",\n \"scopes\": [\n \"\",\n \"\"\n ],\n \"created_at\": \"\"\n },\n {\n \"key_id\": \"\",\n \"name\": \"\",\n \"scopes\": [\n \"\",\n \"\"\n ],\n \"created_at\": \"\"\n }\n ]\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "8b79dc65-e03a-4230-952f-c6e56c348685", "name": "Invalid request", "originalRequest": { "url": { "path": [ "admin", "onboarding", ":requestId", ":action" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" }, { "disabled": false, "description": { "content": "(Required) (This can only be one of approve,reject)", "type": "text/plain" }, "type": "any", "value": "approve", "key": "action" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"notes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "d79846b7-6a45-4d9c-816d-71fd475a1a73", "name": "Authentication required", "originalRequest": { "url": { "path": [ "admin", "onboarding", ":requestId", ":action" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" }, { "disabled": false, "description": { "content": "(Required) (This can only be one of approve,reject)", "type": "text/plain" }, "type": "any", "value": "approve", "key": "action" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"notes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "7ef5222f-fbbf-4438-b92c-dbc97041625c", "name": "Resource not found", "originalRequest": { "url": { "path": [ "admin", "onboarding", ":requestId", ":action" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "requestId" }, { "disabled": false, "description": { "content": "(Required) (This can only be one of approve,reject)", "type": "text/plain" }, "type": "any", "value": "approve", "key": "action" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"notes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "tenants", "description": "", "item": [ { "name": "{id}", "description": "", "item": [ { "name": "kill-switch", "description": "", "item": [ { "id": "6e97f1a8-778c-4824-90c6-3bacbca50e7a", "name": "Emergency kill-switch — revoke all tenant mandates", "request": { "name": "Emergency kill-switch — revoke all tenant mandates", "description": { "content": "**EMERGENCY OPERATION** — Immediately revokes all ACTIVE and SUSPENDED\nmandates for a tenant. This is an irreversible bulk operation intended\nfor security incidents, compliance breaches, or contract terminations.\n\nRequires Cognito JWT with `mandaitor-admins` group membership.\nA `MANDATE_REVOKED` audit event is emitted per mandate with\n`details.kill_switch_triggered = true`.\n", "type": "text/plain" }, "url": { "path": [ "admin", "tenants", ":id", "kill-switch" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "id", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "80477c24-e234-498e-bc86-391b1fac15ec", "name": "Kill-switch executed", "originalRequest": { "url": { "path": [ "admin", "tenants", ":id", "kill-switch" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"tenant_id\": \"\",\n \"revoked_count\": \"\",\n \"skipped_count\": \"\",\n \"execution_id\": \"\",\n \"timestamp\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "584b7e4a-2765-44e6-bc07-bd09c345d55f", "name": "Invalid request", "originalRequest": { "url": { "path": [ "admin", "tenants", ":id", "kill-switch" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "486bd673-48a9-46e1-9a8e-fa91a6d4ff07", "name": "Authentication required", "originalRequest": { "url": { "path": [ "admin", "tenants", ":id", "kill-switch" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "id" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"reason\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] }, { "name": "system-mode", "description": "", "item": [ { "id": "f4cc713b-1de7-425c-8c44-eb2b6f3725ce", "name": "Get current system operational mode", "request": { "name": "Get current system operational mode", "description": { "content": "Returns the current system mode (growth, sustain, maintenance, frozen)\nand associated metadata. Requires Cognito JWT with `mandaitor-admins`\ngroup membership.\n", "type": "text/plain" }, "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "996d8998-e384-409a-8b4a-8376d019a6d6", "name": "Current system mode", "originalRequest": { "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mode\": \"sustain\",\n \"reason\": \"\",\n \"changed_at\": \"\",\n \"changed_by\": \"\",\n \"estimated_duration_minutes\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "7434132c-4264-435d-b77c-118606ca9d3b", "name": "Authentication required", "originalRequest": { "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "87c4e441-bb3a-42fc-8352-b720638634e3", "name": "Set system operational mode", "request": { "name": "Set system operational mode", "description": { "content": "Changes the system operational mode. This immediately affects all API\nendpoints:\n\n- **growth** — Normal operation. All features active.\n- **sustain** — Normal operation. No new features (policy only).\n- **maintenance** — All authenticated endpoints return 503.\n- **frozen** — Write endpoints return 503. Reads still work.\n\nMode changes propagate within ~10 seconds via in-memory cache TTL.\nRequires Cognito JWT with `mandaitor-admins` group membership.\n", "type": "text/plain" }, "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"mode\": \"growth\",\n \"reason\": \"\",\n \"estimated_duration_minutes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "37049c8b-b25e-435c-817a-f2fd228f48b5", "name": "System mode updated", "originalRequest": { "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"mode\": \"growth\",\n \"reason\": \"\",\n \"estimated_duration_minutes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"mode\": \"sustain\",\n \"reason\": \"\",\n \"changed_at\": \"\",\n \"changed_by\": \"\",\n \"estimated_duration_minutes\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "2f57b5ed-2feb-4a05-9816-2deaa0c96aaa", "name": "Invalid request", "originalRequest": { "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"mode\": \"growth\",\n \"reason\": \"\",\n \"estimated_duration_minutes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "8da22eaf-51ea-400f-93d7-f0a4668a6358", "name": "Authentication required", "originalRequest": { "url": { "path": [ "admin", "system-mode" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"mode\": \"growth\",\n \"reason\": \"\",\n \"estimated_duration_minutes\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] }, { "name": "widgets", "description": "", "item": [ { "name": "{widgetId}", "description": "", "item": [ { "name": "config", "description": "", "item": [ { "id": "3d78ef87-5ef9-4b3a-af67-d8c07187e14b", "name": "Public widget config for embed (no auth)", "request": { "name": "Public widget config for embed (no auth)", "description": { "content": "Returns the public-safe widget configuration for embedding. No authentication\nrequired. Sensitive fields (secrets, internal IDs) are stripped from the response.\n", "type": "text/plain" }, "url": { "path": [ "widgets", ":widgetId", "config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "", "key": "widgetId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": null }, "response": [ { "id": "dcdd7412-941b-46f6-910e-be1318e0a05f", "name": "Public widget configuration", "originalRequest": { "url": { "path": [ "widgets", ":widgetId", "config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "widgetId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"widget_id\": \"\",\n \"tenant_name\": \"\",\n \"branding\": {},\n \"enabled_idps\": [\n \"\",\n \"\"\n ],\n \"taxonomy_libraries\": [\n \"\",\n \"\"\n ]\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c19a12d1-1874-4515-9d24-cf3b083ddfb2", "name": "Resource not found", "originalRequest": { "url": { "path": [ "widgets", ":widgetId", "config" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "", "key": "widgetId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: apikey", "type": "text/plain" }, "key": "X-Api-Key", "value": "" } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": \"\",\n \"message\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ] } ] } ], "auth": { "type": "apikey", "apikey": [ { "type": "any", "value": "X-Api-Key", "key": "key" }, { "type": "any", "value": "{{apiKey}}", "key": "value" }, { "type": "any", "value": "header", "key": "in" } ] }, "event": [], "variable": [ { "key": "baseUrl", "value": "https://api.mandaitor.io/v1" } ], "info": { "_postman_id": "550432fe-5aa7-476d-95ad-01eaa7adf63d", "name": "Mandaitor Delegation Mandate Registry API", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "description": { "content": "Neutral, trustworthy infrastructure for verifiable delegated authority\nbetween humans and AI agents.\n\n\nContact Support:\n Name: Mandaitor API Support\n Email: api@mandaitor.io", "type": "text/plain" } } }