Information
- OpenAPI version:
3.1.0
API reference
EthicsPortal API 1.1.0
Section titled “EthicsPortal API 1.1.0”Report metadata, organisation and whistleblowing channel setup, administration, product feedback and outbound webhooks. Each token carries the scopes chosen at issuance; write scopes are opt-in. Report content, attachments and their metadata, messages, notes, category, closure outcome, retaliation, reporter identity and access codes are always excluded. Billing and agreement acceptance require a browser session.
Authentication
Section titled “Authentication”personalToken
Section titled “personalToken”Personal token, prefixed ep_pat_. It belongs to a user and acts with that user’s current role in every organisation they belong to, so some operations also need a role. Only personal tokens can create organisations, and answer the user’s own invitations. Send it as a bearer token. It expires after 90 days and carries fixed scopes chosen at issuance; each operation lists the scope it requires.
Security scheme type: http
organizationToken
Section titled “organizationToken”Organisation token, prefixed ep_oat_. It belongs to one organisation, is managed by its administrators and keeps working when staff change. It has no role: its scopes alone decide what it can do. Send it as a bearer token. It expires after 90 days and carries fixed scopes chosen at issuance; each operation lists the scope it requires.
Security scheme type: http