Skip to content

Overview

Access request management API with policy-driven authorization.

Authentication

Two schemes are supported:

  • ApiKeyAuth: X-API-Key header — used by the Terraform provider and admin operations.
  • BearerAuth: Authorization: Bearer <jwt> — used by the web UI and end users.

All endpoints except /healthz require an X-Tenant-ID header identifying the tenant. The middleware validates that the provided credential belongs to the specified tenant. A mismatch returns 403 tenant_mismatch.

  • OpenAPI version: 3.0.3

Security scheme type: apiKey

Header parameter name: X-API-Key

Security scheme type: http

Bearer format: JWT