A typed REST API for every part of the platform. All endpoints are tenant-scoped and honor role-based permissions.
/v1/auth/tokenOAuth 2.1 client-credentials flow scoped to a tenant.
curl -X POST https://api.commandreai.com/v1/auth/token \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/auth/refreshRotates the access token and returns a new refresh token.
curl -X POST https://api.commandreai.com/v1/auth/refresh \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/transactionsPaginated list with filters: status, agent_id, close_before.
curl -X GET https://api.commandreai.com/v1/transactions \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/transactionsRequires role: tc, brokerage_admin.
curl -X POST https://api.commandreai.com/v1/transactions \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/transactions/{id}Includes parties, milestones, and progress.
curl -X GET https://api.commandreai.com/v1/transactions/{id} \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/transactions/{id}Any subset of mutable fields.
curl -X PATCH https://api.commandreai.com/v1/transactions/{id} \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/transactions/{id}Soft delete; retained in audit log.
curl -X DELETE https://api.commandreai.com/v1/transactions/{id} \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/documentsMultipart upload; triggers AI pre-screen.
curl -X POST https://api.commandreai.com/v1/documents \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/documents/{id}/approveRole: compliance. Enforces separation of duties.
curl -X POST https://api.commandreai.com/v1/documents/{id}/approve \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/documents/{id}/rejectRequires reason and optional annotations.
curl -X POST https://api.commandreai.com/v1/documents/{id}/reject \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/commissionsFilter by agent, status, cycle.
curl -X GET https://api.commandreai.com/v1/commissions \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"/v1/commissions/{id}/payIdempotent. Blocked when compliance is not approved.
curl -X POST https://api.commandreai.com/v1/commissions/{id}/pay \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"yourapp.com/webhooksSigned with HMAC-SHA256. Retries with exponential backoff.
curl -X POST https://api.commandreai.comyourapp.com/webhooks \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json"