48
Total endpoints
45
Auth required
2
Public (no auth)
6
Flagged issues
Authentication
All endpoints (except explicitly public ones) require an authenticated app-user session. Authorization is enforced via row-level security (RLS) — each tenant can only read and modify their own records. Identifiers are opaque, non-enumerable strings.
User
Authenticated app user, RLS-enforced
Admin
Workspace admin only
Public
No auth — public access
Webhook
Signature-verified webhook
Categories
Data CRUDBank StatementsPaymentsIntegrationsPer DiemCalculationsUserReportsPublicVersioned API