Interactive Reference
Every operation, parameter, request body, and response in openapi.yaml, rendered with Swagger UI.
To try a request against the local devserver:
- Start the devserver with this page’s origin allowed. For example,
CORS_ALLOWED_ORIGINS=https://compositecode.github.io make run, orhttp://localhost:4000if you’re running the docs site locally. - Choose Local devserver under Servers.
- Click Authorize and paste a user access token or an API Key.
- Open an operation and click Try it out.
Browser requests to production are blocked by CORS on purpose. The production API allows only first-party browser origins, so admin and service credentials never get used from a web page (see Non-Functional Requirements → CORS). To call production, use curl, a generated client, or an API tool such as Postman. Every operation’s request is shown here for you to copy.
Download openapi.yaml How to read the spec