https://api.getarbol.com/openapi.json.
The contract defines:
- the production server URL and base path;
- request path, query, and JSON body schemas;
- success and error response schemas;
- user and machine authentication alternatives; and
- exact permissions for each operation.
Source of truth
Use the generated endpoint page for operation-specific limits and behavior. Handwritten guides explain cross-cutting patterns but do not replace the schema.The API repository generates OpenAPI from the same implemented router that serves REST requests. Only operations explicitly marked for publication enter this document.
Request conventions
- Send JSON request bodies with
Content-Type: application/json. - Send bearer credentials in the
Authorizationheader. - Use the production URL from the document’s
serversarray. - Record the
X-Request-Idresponse header for support and incident correlation. - Encode arrays and objects exactly as described by each query parameter’s OpenAPI
styleandexplodevalues.