https://api.getarbol.com/openapi.json.
The contract defines:
- the production server URL and base path;
- request path, query, and JSON body schemas;
- success and error response schemas;
- user and machine authentication alternatives; and
- exact permissions for each operation.
Source of truth
Use the generated endpoint page for operation-specific limits and behavior. Handwritten guides explain cross-cutting patterns but do not replace the schema.The API repository generates OpenAPI from the same implemented router that serves REST requests. Only operations explicitly marked for publication enter this document.
Request conventions
- Send JSON request bodies with
Content-Type: application/json. - Send bearer credentials in the
Authorizationheader. - Use the production URL from the document’s
serversarray. - Record the
X-Request-Idresponse header for support and incident correlation. - Encode arrays and objects exactly as described by each query parameter’s OpenAPI
styleandexplodevalues.
Consolidated resource operations
The public contract favors complete resource operations over technical substeps:listContactshandles optional search across names, summary, and stable identities;getContactincludes a cursor-paginated conversation timeline;importContactsqueues a remote CSV import from a URL and field mapper;createConversationselects and validates the organization’s outbound voice capability when no Agent-owned channel exists; and- knowledge uploads advance through background reconciliation after the direct object upload.