API

Get system information

get

Responses

200Success

No content

get

/info

HTTPcURLJavaScriptPython

GET /info HTTP/1.1
Host: 
Accept: */*

200Success

No content

Get demo accounts

get

Responses

200Success

No content

get

/demo-accounts

HTTPcURLJavaScriptPython

GET /demo-accounts HTTP/1.1
Host: 
Accept: */*

200Success

No content

Demo accounts are only available when the engine is running in development mode.

Scenarios

List scenarios

get

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

200

Success

application/json

get

/scenarios

HTTPcURLJavaScriptPython

GET /scenarios HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Success

[
  {
    "id": "text",
    "name": "text",
    "title": "text",
    "description": "text"
  }
]

Store a scenario

post

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Body

application/jsonapplication/yaml

objectOptional

Responses

201

Created

400

Invalid scenario

403

Read-only mode

post

/scenarios

HTTPcURLJavaScriptPython

POST /scenarios HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 2

{}

application/jsonapplication/yaml

No content

Get a scenario by ID

get

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Scenario ID

Header parameters

Acceptstring · enumOptionalPossible values:

Responses

200

Success

No content

get

/scenarios/{id}

HTTPcURLJavaScriptPython

GET /scenarios/{id} HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Success

No content

Disable a scenario

delete

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Scenario ID

Responses

204

No Content

403

Read-only mode

delete

/scenarios/{id}

HTTPcURLJavaScriptPython

DELETE /scenarios/{id} HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Processes

List processes

get

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

pagenumberRequired

List page (max 100 processes per page)

allbooleanRequired

Also return processes where user is not an actor in (admin only)

Responses

200

Success

No content

get

/processes

HTTPcURLJavaScriptPython

GET /processes HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Success

No content

Start a process

post

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Header parameters

As-ActorstringRequired

Body

application/json

scenariostringRequired

actionobjectOptional

Responses

201

Created

post

/processes

HTTPcURLJavaScriptPython

POST /processes HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
As-Actor: text
Content-Type: application/json
Accept: */*
Content-Length: 134

{
  "scenario": "text",
  "actors": {
    "ANY_ADDITIONAL_PROPERTY": {
      "id": "text",
      "title": "text",
      "ANY_ADDITIONAL_PROPERTY": "anything"
    }
  },
  "action": {}
}

201

Created

No content

Get a process by ID

get

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Process ID

Responses

200

Success

No content

get

/processes/{id}

HTTPcURLJavaScriptPython

GET /processes/{id} HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Success

No content

Step through a process

post

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstring · uuidRequired

Process ID

actionstringRequired

Process action

Header parameters

As-ActorstringOptional

Specify actor when multiple actors could have performed the action and actor cannot be determined based on the user

Body

application/json

stringOptional

Responses

204

No Content

post

/processes/{id}/{action}

HTTPcURLJavaScriptPython

POST /processes/{id}/{action} HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 6

"text"

204

No Content

No content

API keys

List API keys

get

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

200

Success

application/json

get

/apikey

HTTPcURLJavaScriptPython

GET /apikey HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Success

[
  {
    "id": "text",
    "token": "text",
    "name": "text",
    "description": {},
    "issued": "2025-12-17T22:45:16.965Z",
    "expirationDays": 1,
    "expiration": "2025-12-17T22:45:16.965Z",
    "lastUsed": "2025-12-17T22:45:16.965Z",
    "revoked": "2025-12-17T22:45:16.965Z",
    "privileges": "scenario:read",
    "processes": [
      {
        "scenario": "123e4567-e89b-12d3-a456-426614174000",
        "actors": [
          "text"
        ],
        "actions": [
          "text"
        ]
      }
    ]
  }
]

Issue a new API key

post

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Body

application/json

namestringRequired

descriptionstringRequired

Responses

201

Created

application/json

post

/apikey

HTTPcURLJavaScriptPython

POST /apikey HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 170

{
  "name": "text",
  "description": "text",
  "privileges": [
    "scenario:read"
  ],
  "processes": [
    {
      "scenario": "123e4567-e89b-12d3-a456-426614174000",
      "actors": [
        "text"
      ],
      "actions": [
        "text"
      ]
    }
  ]
}

201

Created

{
  "id": "text",
  "token": "text",
  "name": "text",
  "description": {},
  "issued": "2025-12-17T22:45:16.965Z",
  "expirationDays": 1,
  "expiration": "2025-12-17T22:45:16.965Z",
  "lastUsed": "2025-12-17T22:45:16.965Z",
  "revoked": "2025-12-17T22:45:16.965Z",
  "privileges": "scenario:read",
  "processes": [
    {
      "scenario": "123e4567-e89b-12d3-a456-426614174000",
      "actors": [
        "text"
      ],
      "actions": [
        "text"
      ]
    }
  ]
}

Revoke an API key

delete

Authorizations

bearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

Responses

204

No Content

delete

/apikey/{id}

HTTPcURLJavaScriptPython

DELETE /apikey/{id} HTTP/1.1
Host: 
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

204

No Content

No content