Skip to main content
This reference is generated directly from the Secfix Public API OpenAPI 3.0 contract — the same contract our servers are built against, so it is always in sync with production. Every endpoint page lets you inspect the schema and try requests interactively.

​
Base URL

All API requests go to https://api.secfix.com.

​
Authentication

All /v1 endpoints require a bearer access token obtained via the OAuth 2.0 client_credentials grant at POST /oauth/token. Send it as Authorization: Bearer <token>. See Authentication and Scopes. GET /v1/health is the only unauthenticated endpoint.

​
Endpoint groups

​
Conventions

  • Pagination — list endpoints return an opaque cursor envelope. See Pagination.
  • Errors — RFC 7807 application/problem+json with a stable code. See Errors.
  • Rate limits — enforced per client_id. See Rate limits.
  • Versioning — additive-only within /v1. See Versioning.

​
Download the spec

The machine-readable contract is available at /api-reference/openapi.yaml — use it to generate clients or import into Postman.